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Detecting 
Vulnerabilities 

Tips & Strategies To Keep 

Your Enterprise & Applications Secure 




by Bill Hayes 

• • • 

A CERTAIN AMOUNT of coiifusion exists 
about vulnerability assessment scanners, 
penetration testing, and Web application 
vulnerability assessment. In fact, you may 
hear the terms used interchangeably. Each 
has a unique value in auditing the secu- 
rity of an organization's IT assets, but they 
really do different things. 

For instance, consider the difference 
between a vulnerability assessment scanner 
used to check for software flaws and a vul- 
nerability exploitation tool used to attack 
systems through known security flaws. "A 
vulnerability scanning tool typically tests a 
target system for open or listening port ser- 
vices," says Stephen Northcutt, president of 
the SANS Technology Institute. 

"Then it makes contact and tries to 
engage the listening service in order to col- 
lect application-layer header information. It 
studies the header information, especially 
any version information, to try to determine 
if there are patterns that indicate a vulner- 
able service," Northcutt says. 

"By contrast, an exploitation tool 
attempts to break in using suspected vul- 
nerabilities. A lot of engineering goes into 
exploitation tools to break in as safely as 



possible and to attempt not to crash either 
the application or the target system itself," 
Northcutt says. 

Vulnerability Assessment Systems 

Kelly Kavanagh, principal research 
analyst at Gartner, says there are three 
basic approaches to vulnerability assess- 
ment. Active network scanning is the 
most used technique. It involves remote 
scans of network-attached devices. 
Active scanning does not require the 
presence of agents on the scan targets, 
but it can use credentialed access to tar- 
gets to enable a deeper inspection. 

The second approach, passive observa- 
tion, is based on the assessment of the 
content and pattern of captured network 
traffic, Kavanagh says. Although passive 
observation can provide information about 
devices that cannot be actively scanned 
(for example, systems with endpoint fire- 
walls), this technique alone generally 
does not provide sufficient data to support 
remediation activity. 

The third option, an agent-based vul- 
nerability assessment system, has agents 
that reside on the devices, either as 
persistent software or as dissolvable 
Go to Page 10 
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Key Points 



Vulnerability assessments are valid ongo- 
ing audits of connputer systems, netvi/orks, 
and software. They can be employed by 
skilled IT staff or outside contractors. 

A variety of tools are available to test 
operating systems. More specialized 
tools are used for Web application vul- 
nerability testing. 

Penetration testing is the most complex 
form of vulnerability assessment. For 
SMBs, contracting with outside specialists 
may be more cost-effective given the high 
skill levels required. 



Are You Ready For IPv6? 

As IPv4 Addresses Dry Up, 
Enterprises Must Ready Themselves 
For A Change In Protocol 



by Mike Chappie 

The world is running out of IP 

addresses — IPv4 addresses, that is. In 
January, the lANA (Internet Assigned 
Numbers Authority) announced that it 
assigned the last available block of IPv4 
addresses and that supplies are limited 
to those on hand with the regional net- 
work authorities. Several months later, 
APNIC, the regional authority for Asia 
and the Pacific, announced restrictions 
on the issuance of new IP addresses, and 



authorities in Europe and North America 
are widely expected to soon follow suit. 

Internet experts saw this problem 
coming more than a decade ago and, 
in 1998, released RFC 2460 defining 
the solution: IPv6. This new proto- 
col uses longer addresses, creating a 
bountiful supply to meet growing de- 
mand. Adoption, however, has been 
quite slow, and only now, 13 years later, 
are organizations beginning to embrace 
the new protocol. 

Go to Page 10 



Key Points 



Organizations are slowly beginning to 
adopt IPv6, driven by the recent exhaus- 
tion of available IPv4 address blocks. 

The most common approach to IPv6 
migration is to run both IPv4 and IPv6 
side by side, and to conduct a phased 
migration as enterprises begin to adopt 
the newer protocol. 

Migrating to IPv6 requires that enterprises 
invest in upgrades of legacy equipment and 
training for their network engineering staff. 
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News 



I Kundra Resigns As Federal CIO 

Vivek Kundra, appointed two and a half years 
ago as the nation's CIO under the Obama 
administration, has resigned from his position 
in order to accept a fellowship at Harvard. 
During his time as CIO, Kundra pushed cloud 
adoption, use of consumer technologies, 
and dissemination of information to the pub- 
lic through sites such as Data.gov. He was 
critical of big IT contracts that had little 
chance of success, and his 25-point plan, 
released six months ago, called for major 
data center consolidation by 2015. However, 
his stated goal of completing a third of the 
work in the first six months was not achieved, 
and this lack of progress is seen as a likely 
factor in his early departure. 

I EHR Developers Can Learn 
From User Practices 

Many healthcare providers still use paper 
and personal spreadsheets even when they 
have a decent system for electronic health 
records in place, according to a recent study 
conducted by researchers at the Richard L. 




Roudebush VA l\/iedical Center on behalf of 
the U.S. Department of Veterans Affairs. In 
addition to this "paper persistence," attrib- 
uted in part to doctors who prefer to take 
notes and read items in hard-copy form, the 
research uncovered "workarounds, com- 
munication breakdowns, and redundancies 
in computerized consult management." 
However, some of said workarounds may 
actually give developers ideas for making 
EHR systems more useful and intuitive in 
the workplace, the study concludes. 

I PCI Council Issues 

New Virtualization Guidelines 

Given the recent rush to the cloud, 
coupled with a spate of high-profile 
security breaches, there's been 
some confusion over the 
proper way to implement 
PCI DSS (Payment Card 
Industry Data Security 
Standard) in a virtual 
environment. However, . 
industry observers are 
applauding a recent 
clarification document 
from the PCI Security 
Standards Council, which 
they say provides the most 
comprehensive guidance to ^ 
date on securing hypervisors 
and mixed-mode environments 
and addressing critical functions such 
as intrusion prevention and firewalls that 
have heretofore been left murky in the virtual- 
ization context. 

I Acer Sees Sales Decline, 
Adjusts Tablet Shipment Guidance 

Computer maker Acer has adjusted its tablet 
shipment predictions following a sluggish few 
months in sales. Previously anticipating tablet 
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sales of between 5 million and 7 million units, 
the company lowered its 201 1 forecast by half 
to between 2.5 million and 3 million. Though 
it is confident it can sell 800,000 tablets in 
the second and third quarters, Acer has not 
released guidance for the fourth quarter and 
shaved 1 0% off of its PC sales forecast for the 
year after experiencing a 29.2% drop in sales 
in May. Acer and other tablet manufacturers 
are experiencing difficulties in keeping up with 
the massive success of Apple's iPad. 

I EU Countries Sluggish 

With E-Privacy Directive For Cookies 

The European Commission has report- 
ed that just three countries in the 
European Union — Denmark, 
Estonia, and the United 
Kingdom — had taken 
■■■ steps to follow a set 

* of e-privacy direc- 

tives issued by the 
Commission by the 
stated May 25 dead- 
line. The rest of the 
EU entities have 
been dragging their 
feet on implementing 
policies to enforce the 
new directive, which 
requires companies to 
^ obtain permission from 

users to store cookies that 
are associated with advertising 
and user activity on the Web. The 
Commission recommends that noncompliant 
countries in the union evaluate their cookie 
use, understand types of consent, and review 
new expectations for businesses as part of 
their efforts to implement the directive. Member 
states that fail to implement e-privacy laws 
could face sanctions from the Commission. 

I Oracle To Acquire FatWire 

Oracle announced late last month that it has 
entered an agreement to buy privately held 
FatWire Software, a provider of Web expe- 
rience management solutions. FatWire 
describes its solutions as tools to help enter- 
prises deliver a rich online experience to users 
and simplify management of their Web pres- 
ence. The company was founded in 1996 and 
is headquartered in Mineola, N.Y., with global 
offices in 1 1 countries. The company serves 
more than 500 customers in financial services, 
media, technology, manufacturing, retail, 
healthcare, and public sector spaces. Oracle 
expects the acquisition to extend its offerings 
for customers wanting to build unified customer 
experiences across channels and give the 
company a complete customer experience 
management solution that helps organizations 
drive customer retention and loyalty through 
improved online engagement. Other than a 
mid-201 1 closing timeframe, no other terms of 
the deal were disclosed. 
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Automatic Transfer Switch — ATS 



irsu ^ ST 




Standard Features 

Out-Of-Phase Source Switching 
8-1 5ms Switching Time 
Programmable Dropout Voltage 
Programmable Switchback Voltage 
SNMPAnd HTTP With DS-Series 
PCB-Based Reliability 
Reports Volts, Current, Watts, VA 
Break-Before-Make Transfer 



Provide Redundancy To Single-Corded Devices With 
The Ability To Switch Out-Of-Phase Sources In 8 To 15ms. 



Providing redundancy on the power-circuit level is critical to maintaining 
uptime. The ATS Series provides a simple and reliable solution for auto- 
matically sensing power loss and seamlessly switching to a backup circuit. 
BayTech ATS transfer switch line offers a unique approach to performing the 
transfer by completely severing the connection between the source and load 
then waiting for the zerocrossing to perform the transfer. This is the driving 
force behind being able to perform out-of-phase transfers with a low-cost 



solution. Monitoring Power on the ATS is a unique feature which provides 
information about: 

• Amperage Load • (Watts) True RMS Power • Volt-amps 

• Voltage • Internal Temperature 

By combining the ATS and the DS-Series, console server alerts on 
power and transfers can be sent via secure SNMP V3. 



Bay Technical Assoc. Inc. 5239 A Avenue Long Beach, MS 39560 Tel: 228-563-7334 Fax: 228-563-7335 sales@baytech.net 



Server Racks 

*Free Shipping! 



42U $799.95 
WC42U-BK 



42U CO-LO $1750 
WC42UCO-BLK 
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Your Source For KVMs, 
PDUs, Rackmount Keyboard Monitors, 
Accessories 
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Prepare For The Unexpected With Room Alert 



one knows when or how disaster will 
strike. We just know the poSential is always there. 
So preparation is crucial to minimizing its impact 
on computers, networks, users & business. 

When disasters occur, there are significant 
costs in areas that go far beyond the simple 
replacement of damaged hardware. This is 
because what happens in the data center or other 
facility eflbcts the entire organization. If disaster 
strikes your facility, how will it impact business? 
Who will get the blame? Could it have been 
prevented? What will it cost? 





Solutions 




Start At $195 


Room Alert products can monitor: 


' Temperature 


' Smoke /Fire 


' Humidity 


* Air Flow 


' Heat Index 


* Sound, Light 


' Main /UPS Power 


' Panic Buttons 


• Flood /Water 


■ Dry Contacts 


' Room Entry, Motion 


' Swilch Sensors 


• IP Network Cameras 


' Wireless & More 



AVTF.CH has a full line of powerful, scalable 
Room Aleii solutions for real-time 
environment monitoring in a computer room, 
data center or other facility. All models 
arrive assembled with easy to install 
hardware, cables, sensors, easy-to-use 
logging & alerting software, printed 
documentation, unlimited technical support 
and a '30-Day Satisfaction Guarantee'. Users 
can typically install in under 10 minutes. 

Room Alert products monitor critical 
environment conditions like temperature, 
power, humidity, flood, smoke, room entry, 
air flow, motion and more, alert statT by any 
method and can take automatic corrective 
action. There is a model that is right for any 
organization and budget... yours too! 

Call or Visit Us Online Today 



2^AVTECH 



888.220.6700 • 401.628.1600 
AVTECH.com 



Protect Your IT Facility... Don't Wait Until It's Too Late!' 
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STATS & FACTS 

Providing The Latest Insight & Information 
From Leading Research Firms 



Tablets, Tablets 
& More Tablets 
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The tablet market is exploding and shows no signs of slowing down, with new manufacturers 
entering the market on a regular basis. The use of tablets in both small business and enterprise 
settings is on the rise, too. If your enterprise hasn't yet developed a plan, it needs to. 

8.87 million ■ The number of tablets in use in SIVIBs with 1 to 1 ,000 employees, 
according to Techaisle. About half were purchased by employees who then brought them to work. 

United States: The country that remains the biggest market for tablets, IDC says. 
The United States, Western Europe, and the Asia-Pacific region (excluding Japan) accounted for 
89% of all tablet shipments during the fourth quarter of last year. 

70 million: The number of tablets research firm Gartner predicts will be sold this year, 
more than four times the 15 million units sold last year. 



2015: 



The year by which Forrester predicts tablet sales will outpace notebook sales. 



48 million ■ The number of iPads Apple will sell this year, according to Gartner. The 
company will claim about 70% of the market. 



But There's A Downside 



it was almost inevitable that tablet sales would cut into shipments of PCs and note- 
books, but the hard drive market is also experiencing doldrums because the typical 
tablet PC relies on flash or solid-state drives, according to research firm IHS iSuppli. 

Although iSuppli still predicts growth in the hard disk drive market, 
other than a small blip in 2013, that growth rate will continue a 
steady year-over-year decline: 
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7% 
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4.1% 


2012: 


3.9% 


2013: 


4.5% 


2014: 


2.8% 


2015: 


2.1% 



I Majority Of SMBs Don't Consider 
ITIL Support In Buying Decisions 

A global survey of about 850 IT profession- 
als that focused on service desk trends indi- 
cates that 71% of SMBs didn't consider ITIL 
(Information Technology Infrastructure Library) 
support a factor when purchasing their service 
desk tools, even though 50% indicated they 
had adopted some form of ITIL. Additionally, 
91% of those Dimensional Research surveyed 
on behalf of Dell Kace reported they haven't 
adopted ITIL at all or only use ITIL as a guide- 
line. According to Dimensional Research's 
Diane Hagglund, the survey shows that IT 
departments believe they can gain better effi- 
ciencies by "integrating their service desks with 
other processes to rapidly provide complete 
information about the endpoints they service." 
She adds that even though most organizations 
see a value in integrating service desk solu- 
tions with other systems, "few SMBs have been 
able to implement this important integration." 
The survey found that despite most SMBs 
striving to optimize service desks through inte- 
gration with desktop management, 71% view 
cost factors or technology complexity as having 
impaired their ability to follow through. Another 
finding indicates SMBs prefer ease of use over 
advanced features. 

I Demand For SIVIB IT Services 
On The Rise 

New research conducted by Techaisle on 
VARs, iSVs, and service providers found that 
38% offer SMB cloud computing solutions, and 
another 11% plan to offer cloud computing in 
201 1 . Furthermore, 1 2% of those that do offer 
cloud solutions can deliver all four types of 
cloud computing services: laaS, PaaS, CaaS, 
and SaaS. Techaisle predicts that more chan- 
nel providers will be offering all four cloud 
services to SMBs because it's easier for SMBs 
to invest in services from the same channel 
partner. The study found that more than 50% of 
SMBs want cloud-based industry vertical solu- 
tions, but only 28% of cloud computing channel 
providers offer a vertical product. 

I Windows 8 Demo Sparl(s Concerns 

Microsoft performed two demonstrations of its 
Windows 8 live tile touch-based interface last 
month, and the demos have prompted third- 
party developers to express concerns about 
how (and whether) the Silverlight and .NET 
platforms will be used in the new operating 
system. The software giant released a Win8 
introductory video that indicated it would be a 
platform based on Web technologies, such as 
HTML5 and JavaScript. As such, developers 
familiar with Silverlight and .NET are worried 
that they may need to learn new skill sets to 
write code for future versions of Windows. For 
its part, Microsoft has made no comment one 
way or another about the inclusion of Silverlight 
and .NET technology. 

I IP Pros Comfortable 
With Cloud Computing 

In spite of the burgeoning popularity of cloud 
computing, most IT pros do not fear being dis- 
placed — or replaced — by the cloud. According to 
a recent "Future Proofing the Cloud" survey of IT 
professionals, analysts, and media, IT practition- 
ers feel that they'll be involved in the process of 
converting their companies' enterprise IT infra- 
structures into private or hybrid clouds and will 
ultimately take on the role of provisioning cloud 
services for their users and partners. Relating 
to the popularity of the cloud, the survey — con- 
ducted as part of the Cloud Leadership Forum- 
found that 81% of those surveyed agreed with 
the statement, "By 2015, at least 30% of Fortune 
1000 enterprises will deploy at least one busi- 
ness-critical system in the cloud." 

I Study: Cyber Attacks On The Rise 

A recent Ponemon Institute survey notes that 
cyber attacks are becoming more frequent and 
severe and that the majority of businesses 



have suffered at least one data breach in the 
past year. The survey, sponsored by Juniper 
Networks, reports that 53% of respondents 
have low confidence that their networks would 
avoid attacks in the next year; only 24% say 
they have high confidence that they won't suf- 
fer attacks. The attacks are expensive, with the 
average cost of 55% of the breaches falling 
between $250,000 and $1 million. Employee 
laptops were the most common sources of 
those breaches (34%), followed by mobile 
devices (29%) and corporate desktops (28%). 

I DHS Unveils New Compliance Rules 

In an effort to better monitor cybersecurity, 
the U.S. Department of Homeland Security 
announced updated 201 1 performance met- 
rics for compliance with FISMA (the Federal 
Information Security Management Act). The 
metrics touch on a number of areas, including 
system inventory, asset management, configu- 
ration management, vulnerability management, 
identity and access management, data protec- 
tion, boundary protection, incident management, 
training and education, remote access, network 
security protocols, software assurance, and 
continuous monitoring. A lot of the needed infor- 
mation centers around how many items — user 
accounts, DNS names, pieces of certain types 
of equipment, and so on — an agency has. 

I Desktop OS Trends In The Enterprise 

According to a report from Forrester Research, 
Windows XP is still the dominant enterprise 
operating system with 59.9% of the market, 
despite being a decade old and superseded by 
two generations of Windows OSes. Windows 
Vista lost ground over the past year and is 
now at 6.2%, down from 1 1 .3%. Windows 7 
is steadily gaining ground; a year ago, it had 
9.5% of the market, but that share has grown 
to 21%. In all, about 87% of all corporate com- 
puters run some version of Windows. Macs are 
penetrating somewhat, however, with growth 
up to 1 1 % from 9.1 % a year ago. 

I Research Group: 

IT Spending "Catches Fire" 

The "IT spending squeeze" brought about by 
the financial crisis is over, according to Maven 
Wave, a management consulting firm. In a 
recent study, Maven Wave found that the 
spending freeze ended in the fourth quarter of 
2010, and new data the firm released covering 
the first quarter shows continued improvement, 
with the MIT Index (a measure of spending on 
IT) up 14%. In addition, faster-than-expected 
hiring drove the MIV Index (a measure of 
corporate earnings in relation to spending on 
the IT workforce) to $19.44, indicating that for 
every dollar corporations spend on the IT work- 
force, they'll see $19.44 in corporate earnings. 
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I RIM Has Disappointing Quarter, 
Announces Changes 

BlackBerry maker Research In Motion's net 
income for its fiscal 2012 first quarter dropped 
10% from a year ago, hitting $695 million, or 
$1 .33 per share. The company sold 1 3.2 million 
BlackBerry handheld devices, below RIM's pre- 
vious expectations. RIM did have some high- 
lights, with first-quarter revenue up 16% from 
a year ago and international revenue up 67% 
year-over-year. As a result of the overall disap- 
pointing results, RIM says it will begin a "cost 
optimization program" to streamline operations, 
resulting in some employee layoffs. 

I New Cloud Usage Models 
Aim To Ensure Better Security 

The Open Data Center Alliance, a group 
made up of more than 250 total members 
that have invested heavily in cloud comput- 
ing technology, released new cloud usage 
models that the alliance says will improve 
security in cloud environments. The Provider 
Security Assurance model suggests that cloud 
providers should make their security features 
evident so that potential customers can easily 
compare their security offerings. The Security 
Compliance Monitoring model states that 
real-time monitoring is essential to providing 
improved security and outlines specifically 
what aspects of a product or service should 
be monitored. 

I Skype Executives Exit 
After Microsoft Buys Company 

A total of eight executives at Skype left the 
company following its acquisition by Microsoft. 
These executives included David Gurle, vice 
president and general manager for Skype 
For Business, and Don Albert, vice president 
and general manager for the Americas and 



Advertising. Two executives from Qik, a com- 
pany Skype had recently acquired, also left the 
company. Microsoft is in the process of closing 
the deal, which was announced in May and is 
valued at $8.5 billion, and has yet to take full 
control of the company. 

I Symantec Releases Latest 
State Of Spam & Phishing Report 

According to Symantec's June "State of Spam 
& Phishing" report, overall spam volumes 
continue to decline to 2006 levels, making 
up 72.14% of all emails sent. Year-over-year 
spam volumes declined by 70.65%, and 
between April and May, volumes declined 10%. 
Symantec says that shuttered botnets are 
responsible for the declines; however, it's not 
all good news: As in previous months, phish- 
ing attacks continued their surge, rising 6.67% 
between April and May. Automated toolkit use 
for generating phishing Web sites was also up 
by 24.82%. Cybercriminals are beginning to 
target non-English speakers with their scams; 
non-English phishing sites increased 17.73%, 
with target languages including Portuguese, 
French, Italian, and Spanish. 

I Communication Study 
Highlights Preferences For Family, 
Friends & Colleagues 

A new Harris Interactive poll, sponsored by the 
mobile VoIP provider Rebtel, finds that adults 
still favor phone calls for communicating. When 
communicating with family not in person, 81% 
of respondents said they communicate via 
voice and phone calls, 80% use email, 57% 
use text and SMS messages, and 51% use 
social networks. The favored communication 
methods between friends is slightly different, 
with 83% using email, 74% using phone and 
voice, 61% social networks, and 57% text and 
SMS messages. The top communication 



method for spouses and significant others is 
voice and phone (85%), and the top method for 
work colleagues is email (73%). 

I Consumers Fail To Grasp 
Cloud Concept 

A new survey of 1 ,000 American adults from 
the researchers at Ipsos OTX MediaCT reveals 
that, for the most part, consumers' understand- 
ing of what constitutes a cloud-based sen/ice 
is tenuous at best. When asked specifically 
about their use of cloud-based services, 22% of 
the survey respondents said they use cloud-based 
email, 13% use photo services, 9% use music and 
videos, 9% indicate that they use a cloud-based 
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office suite, and 8% use storage and backup 
services. But when the term "cloud" was taken 
out of the questions and users were asked 
about the services they use based on the brand 
names, the responses changed dramatically, 
with about 90% of users saying they are using 
some type of cloud-related service. 

I Oracle Seeks Billions From Google 
In Java Patent Dispute 

Oracle is seeking up to $6.1 billion in dam- 
ages from Google in a lawsuit that claims 
Google's Android software infringes on 
Oracle's Java patents. Oracle sued Google 
last August, claiming that the search company 
willfully infringed on several patents related 
to its Java programming language, which it 
obtained in January 2010 after acquiring Sun 
Microsystems. The judge presiding over the 
case ordered Google to disclose Oracle's dam- 
age claims, which range from an estimated 
$1.4 billion to $6.1 billion. Google is disputing 
the claim, which it called a "breathtaking figure 
that is out of proportion to any meaningful mea- 
sure of the intellectual property at issue." 

I Search Giants Form Schema.org 

Search entities Microsoft Bing, Google, and 
Yahoo! have partnered to form Schema.org, an 
initiative to aid Web developers in creating bet- 
ter, more comprehensible Web page metadata. 
The new common vocabulary for data markup 
(an assortment of HTML tags) aims to provide 
users with more relevant, usable search results 
by giving Web developers a common markup 
language that will be recognized by the major 
search engines. Google has already made efforts 
to strengthen its markup language in the past 
with rich snippets, which included reviews, rat- 
ings, etc., within search results. This change may 
require increased effort from Web publishers but 
will likely fix issues with automated data analysis. 
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The Processor Product Releases section 
includes brief overviews of data center products. 

All products listed have been released recently, so use this section to get 
up to date with what's new on the market and to find products you need. 



Manufacturers: 
Do you have a new product that data center/IT 
managers would be interested in learning about? 

Send your press release or product information 
to press@processor.com. 



Physical Infrastructure 



■ Access Cable Trays 
ACT/FloorFlex System 

Raised flooring is essential to today's 
data centers, switch rooms, and offices. That 
doesn't mean, however, that it has to be dif- 
ficult. The ACT/FloorFlex System from 
Access Cable Trays is easy to install and sim- 
ple to retrofit into existing access flooring, and 
it's also a cinch to reconfigure as you need 
to. It's based on 24- and 48-inch modules to 




take fiiU advantage of the standard 2- x 2-foot 
floor panel. The system is optimized for easy 
vertical support height adjustment, including 
stacking, with integrated cable management 
features. And it can put your cables within 
2 inches of the floor surface. For more on this 
product, see page 19. 

■ FleldView Solutions FieldView 4.0 

Aimed at providing administrators a clear 
picture of data center power consumption 
and inefficient power usage, FieldView 
4.0 is an enhanced data center information 
management system that the company says 
will help effectively manage data center 
power usage. The new release gives data 
center and facilities managers a complete 
view into all aspects of their data centers. 

■ ITWatchDogs I/O Expander 

ITWatchDogs has added an accessory 
to its line of Series 11 Environmental moni- 
tors with the lOE (Input/Output Expander) 
device. With the lOE, IT staff can increase 
an environmental monitor's sensor and 
relay output capacity through the addition 
of 32 dry contact 0-5VDC analog inputs. 




Users can regulate alarm thresholds for 
0-5VDC signal and open and closed switches. 
The three relay outputs allow users to activate 
auto-dialers, strobe lights, and other external 
devices on alarm. The lOE is outfitted with a 
steel rackmount chassis and is powered by a 
6VDC power adapter. At just $479, the lOE 
presents a powerful, flexible, and economi- 
cal solution for an added layer of monitoring, 
alarming, automation, and control. For more 
on this product, see page 13. 

■ MovinCool CIVIW30 

MovinCool's new CMW30 cooling 
unit is water-cooled and can be used as a 
ceiling-mounted air conditioner for server 
rooms. It has a cooling capacity of 29,400 
BTU/hr for larger rooms and 22,000 BTU/ 
hr for compute rooms. The CMW30 has a 
built-in mounting bracket as well as built- 
in flanges and vibration isolators. 

■ Perle Systems PoE Media Converters 

Perle Systems has launched 96 PoE Media 
Converters, which connect copper to fiber 
while providing Power over Ethernet to 




standards-based PoE- and PoE-n-compliant 
devices, including IP cameras, VoIP phones, 
and wireless access points. Perle PoE Media 
Converters support auto-negotiation, auto- 
MDIX, link pass-through, fiber fault alert, 
and loopback for improved troubleshooting 
and lower maintenance. 

■ Siemon VersaPOD 

Siemon announced its new line of 
VersaPOD data center cabinets and open 
rack systems, which are designed to take 
advantage of the vertical space between 
cabinets and racks using the company's 
Zero-U accessories. Each VersaPOD sys- 
tem can support routing for more than 
5,000 cables, and the Zero-U vertical patch 
panels and cable managers can help free up 
horizontal room 
by adding up to 
40U of mount- 
ing, cable man- 
agement, and 
patching space. 
The complete 
VersaPOD line 
includes Zero- 
U-compatible 
1,000mm and 

1,200mm cabinets and adjustable four-post 
open racks, as well as 600mm cabinets 
without Zero-U provisions. For more on 
this product, see page 13. 

■ Staco Energy Products 

Tailored FirstLine P & PL UPS Solutions 

Standard and optional features help the 
FirstLine P and PL tailored three-phase 
online double-conversion UPS solutions 
from Staco Energy Products play nice as 
they safeguard your data center's power 
requirements. They're online double- 
conversion units with dual AC inputs and 
support for IGBT and DSP. They're also 
highly efficient with laudable power factors, 
which translate into lower electricity bills 
and a greener footprint for your organiza- 
tion. The units also feature upstream fil- 
tering of harmonics and reactive power 
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emanating from the powered load. Both 
models support the use of multiple units in 
parallel for enhanced protection in aggravat- 
ed circumstances, and both feature flexible 
installation options and a two-year full war- 
ranty. For more on this product, see page 19. 

■ Telect Four-Post 
Adjustable Depth Channel Rack 

Telect' s new Four-Post Adjustable Depth 
Channel Rack features 12/24 threaded rack- 
mounting holes and includes all the com- 
ponents needed for installation. Each rack 
can be adjusted to multiple depths: from 
20 inches to 36 inches with a smaller 
bracket and 36 inches to 42 inches with a 
larger bracket. 

■ Thomas & Betts 
Catamount Twist Tail Cable Tie 

Thomas & Betts Catamount Twist Tail 
Cable Tie lets installers remove the tail end 
of the tie without having to use tools. The 
patented design lets the user simply bend and 
twist off the tail once the cable is installed. 




Networking & VPN 



■ Attachmate Reflection 
For The Web 2011 R1 

Attachmate announced Reflection for the 
Web 2011 Rl, a tool designed to help com- 
panies securely connect local and remote 
users to legacy applications on a variety 
of host platforms. The latest version of the 
product includes features to maximize IT 
flexibility and enhance user productivity 
and experience, along with support for mul- 
tiple platforms and browsers. 

■ Black Box 

PoE L2 Managed Gigabit Switches 

Black Box has announced its PoE L2 
Managed Gigabit Switches, designed for 
converged networks with a mix of wire- 
less access points, VoIP phones, and 
CCTV cameras. The switches carry both 
1,000Mbps Ethernet data and 48- VAC 
power across twisted-pair wiring to 
802.3af-compatible devices. The switches 
include SEP optical transceiver slots. 

■ BMC Software & Unisys 
Advanced Cloud Solutions 

BMC Software and Unisys have part- 
nered to release and manage advanced 
cloud solutions aimed at making users' IT 
organizations more responsive and effi- 
cient where delivering business services 
are concerned. The solutions are based 
on BMC's second-gen Cloud Lifecycle 
Management solution and Unisys' cloud 
advisory, implementation, and manage- 
ment services portfolio. 

■ Cisco ASR 9000 Series 
Aggregation Services Routers 

Cisco announced its line of Cisco ASR 
9000 Aggregation Services Routers, which 
are designed to give service providers a 
simpler way to architect next-generation 
Internet tools. The Cisco ASR 9000 series 
is designed to complement the Cisco 
CRS-3 Carrier Routing System and is 
positioned on the edge of the network. 

■ ClearCube Technology Cloud Desktop 
7422 DBO Digital Fiber PColP Zero Client 
& Zero Client Customization Service 

ClearCube Technology has released the 
Cloud Desktop 7422 DB9 Digital Fiber 
Zero Client and Zero Client Customization 
Service. The company says the 7422 was 
developed upon a request for a DB9 serial 
connector to connect to peripherals in a 
particular environment. The zero client was 
designed to connect directly to a digital fiber 
network with an SFP module. Optional fea- 
tures include a custom case, CAC readers, 
smart card readers, 10/ 100/ 1000Mbps fiber 
connections, and more. 

■ ForeScout CounterACT Network Access 
Control Virtual Appliance 

ForeScout launched a virtual appliance 
version of its CounterACT Network Access 
Control solution. The offering lets users man- 
age and view any and all devices connect- 
ed to enterprise networks in real time. The 
ForeScout CounterACT Virtual Appliance 
operates on VMware ESX 3.5 and 4.x. 

■ HP Converged Infrastructure Platforms 

HP announced several converged infra- 
structure platforms designed to streamline 
deployment and accelerate IT delivery. The 
new offerings include Converged Systems, 
Converged Storage architecture and port- 
folio. Converged Data Center, and the HP 



Server Automation 9. 1 software, which lets 
users provision physical and virtual appli- 
cation instances across the entire life cycle. 

■ HP Hybrid Delivery Environments 
& Cloud Services 

HP introduced new services and 
improvements in its hybrid delivery envi- 
ronments, which combine traditional 
IT infrastructures with private and pub- 
lic clouds to get the best of both worlds. 
HP's new Enterprise Cloud Service - 
Vulnerability Scanning reduces common 
security mistakes, while the Enterprise 
Cloud Service - Vulnerability Intelligence 
offering provides information on newly 
discovered potential threats. Improvements 
were also made to HP CloudSystem, HP 
CloudAgile, and HP CloudStart, 

■ Infoblox NetMRI 

Infoblox has improved its NetMRI 
with new network infrastructure automa- 
tion capabilities to help accelerate cloud 
deployment. New Infoblox automation 
features accessible through Infoblox 
NetMRI include dynamic templates, auto- 
mation sandbox and customizable tools, 
runbook automation, and a blacklist 
option. This solution reflects a combina- 
tion of NetMRI, Infoblox Orchestration 
System, and IP address management capa- 
bilities in Infoblox Grid technology. 

■ ManageEngine EventLog Analyzer 7.0 

The latest release of ManageEngine' s 
EventLog Analyzer event and applica- 
tion log monitoring software includes a 
new agent for log collection, in addition 
to agentless log collection capabilities. 
EventLog Analyzer 7.0 also now supports 
RADIUS, Active Directory, and other user 
authentication methods. 

■ Oracle Optimized Solution For 
Enterprise Cloud Infrastructure 

Oracle announced the release of Oracle 
Optimized Solution for Enterprise Cloud 
Infrastructure, aimed at helping to acceler- 
ate enterprise infrastructure-as-a-service 
cloud deployments. The company says 
that the system can speed virtual machine 
deployment times by up to 98%, thus low- 
ering TCO and improving productivity for 
enterprises and cloud service providers. 

■ Oracle VM Server For SPARC 

Oracle has announced the addition of 
Oracle VM Server for SPARC 2.1 to its 
integrated desktop-to-data-center virtual- 
ization portfolio. The Oracle VM Server 
for SPARC server virtualization solu- 
tion is preinstalled on Oracle's SPARC 
T-series servers and allows up to 128 vir- 
tual machines, or "domains," on one sys- 
tem. It offers live migration capabilities. 

■ Ouest Software Total Virtual Data 
Protection & Virtual Infrastructure Assurance 

Quest Software announced two prod- 
uct suites designed to protect and manage 
entire virtualized environments. The suites 
include Quest Total Virtual Data Protection 
and Quest Virtual Infrastructure Assurance. 
In addition to protecting VMware environ- 
ments, including Microsoft SQL Server, 
Exchange, Active Directory, SharePoint, 
and other applications, the Total Virtual 
Data Protection suite offers recovery capa- 
bilities and includes Quest vRanger and 
the Recovery Manager family of products. 
The Quest Virtual Infrastructure Assurance 
suite provides monitoring, storage, and 
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network management tools and includes 
vFoglight Pro for visibility into VMware 
ESX and Microsoft Hyper-V environments. 

■ ScaleMatrix Cloud In A Box 

ScaleMatrix unveiled the ScaleMatrix 
Cloud in a Box, which allows compa- 
nies to deliver public, private, or hybrid 
clouds in hours rather than days or weeks. 
ScaleMatrix Cloud in a Box combines the 
3Tera AppLogic cloud platform from CA 
Technologies with ScaleMatrix' s hard- 
ware solutions to deliver on-premises pri- 
vate clouds. 

■ Silver Peak Systems NX-10000 

The NX-10000, or NX-IOK, from Silver 
Peak Systems is a WAN optimization appli- 
ance that supports up to 2.5Gbps of WAN 
throughput with 256,000 concurrent ses- 
sions, the company says. Targeted toward 
next-gen data centers, the NX- 10k boasts 
four 10 Gigabit Ethernet interfaces and is 
optimized for all IP traffic and applications. 

■ SolarWInds Virtuallzatlon Manager 
& Storage Manager 

SolarWinds unveiled its new Virtual- 
ization Manager and Storage Manager solu- 
tions, which let users manage the server 
virtualization layer and optimize storage 
performance and capacity for virtualization. 
SolarWinds Virtualization Manager lets 
users map dependencies and perform foren- 
sic troubleshooting and historic problem 
analysis, use vSphere Plugin to perform 
virtualization management tasks directly 
from the VMware vCenter inventory, and 
support storage and network I/O in capac- 
ity planning to help efficiently budget and 
plan for new purchases. The SolarWinds 



Storage Manager is powered by Profiler 
and features storage I/O hotspot detection, 
VM-to-physical storage mapping, mul- 
tivendor SAN and Fibre Channel switch 
management, VMware thin provisioning, 
and the Orion Integration Module. The 
SolarWinds Virtualization Manager and 
Storage Manager are currently available 
starting at $2,995 apiece. 

■ Talend Cloud 

Talend announced the release of 
Talend Cloud, a cloud-enabled integra- 
tion platform for cloud and hybrid IT 
environments that provides a common 
environment for users to manage the 
entire life cycle of integration process- 
es, including a graphical development 
environment, a deployment mechanism, 
and a runtime environment for opera- 
tions. Talend Cloud is an extension of 
the company's recently released Unified 
Integration Platform. 



Storage 



■ Addonics Blu-ray/DVD DigiCopier 

Addonics Technologies has released a 
new standalone optical disc duplicator capa- 
ble of copying unprotected BDs, DVDs, and 
CDs without the need for a PC. Pricing for 
the Blu-ray/DVD DigiCopier ranges from 
$459 for a product capable of duplicating of 
one disc at a time to $2,359 for a model that 
can make 1 1 copies at once. 

■ Bocada Prism 

Bocada has updated its Prism data pro- 
tection management suite, adding enhanced 
reporting to provide a clear view into the per- 
formance of duplication jobs while tracking 



the data as it moves through its entire life- 
cycle. Part of the product enhancements allow 
users of Symantec NetBackup to view a com- 
prehensive list of job data at the server, poli- 
cy, client, and schedule levels. 

■ Business Intelligence Associates 
TotalDiscovery.com 

Business Intelligence Associates released 
TotalDiscovery.com, a SaaS eDiscovery 
application designed to give users better 
visibility into data needed by legal for case 
development. Features include BIA's Data 
Profiler; automated identification, collection, 
and delivery of data; minimal setup; and high- 
ly secure data preservation and transfer. 

■ Cabinet NG CNG-WEB 

Cabinet NG announced enhancements to 
its CNG-WEB product, which is an optional 
module available for the company's CNG- 
SAFE product. CNG-WEB helps users man- 
age and file documents on a premises-based 
server or online in a hosted environment. 
CNG-WEB supports viewing, creating, edit- 
ing, routing, and scanning documents. 

■ Dell EqualLogic FS7500, 
Component Storage Center SAN 
& PowerVault MD3600f/MD3602f 

Dell has announced three new storage 
solutions: the Dell EqualLogic FS7500, 
the Compellent Storage Center SAN, and 
the PowerVault MD3600f/MD3602f. The 
EqualLogic can file-share up to 510TB of 
data, supports scale-out CIFS and NFS, and 
uses Dell's new EqualLogic software ver- 
sion 5.1. The Compellent Storage Center 
SAN is a 16Gbps Fibre Channel solution 
built to support the newest applications 
as well as cloud-based environments. 



The PowerVault solutions feature eight 
SGbps Fibre Channel ports; the ability to 
hold up to 96 hard drives with additional 
enclosures; and support for remote replica- 
tion, virtual disk copy, and other data pro- 
tection tools. 

■ Dot Hill AssuredSAN 3000 Series 

Dot Hill announced that its AssuredSAN 
3000 Series storage arrays now support 3TB 
hard drives, meaning the 2U storage solution 
is able to provide up to 36TB of capacity. 
Along with the expanded storage capabili- 
ties, the series also comes with an enhanced 
version of the company's AssuredRemote 
replication features, which now include new 
wizards and scheduler improvements to fur- 
ther enable disaster recovery protection and 
business continuity. 

■ Imation RDXA8 

The RDX A8 is the latest hard disk stor- 
age library in Imation' s line of networked 
storage devices. It can hold up to eight of the 
company's hard drive-based RDX remov- 
able cartridges, which come in capacities of 
up to 1TB each. Targeted toward the SMB 
market, the RDX A8 can be set up for tape 
emulation or in a JBOD mode. It's scalable, 
and its iSCSI connectivity allows for an easy 
fit into a business network. Sequential transfer 
speeds of 75MBps make it suitable for back- 
ups, the company says. Imation' s distributors 
are currently seUing the RDX A8 for $3,395. 

■ NetApp OnCommand 

NetApp has announced new technolo- 
gies within its OnCommand management 
software for controlling, automating, and 
analyzing a shared storage infrastructure 
Go to Page 8 
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Continued from Page 7 
aimed at producing greater optimization 
and efficiency. OnCommand has four fun- 
damental elements that compose a cloud: 
service catalog, service analytics, automa- 
tion, and self-service. 

■ Netlist Mini PCI Express SSD 

Netlist has expanded it embedded flash 
portfolio by adding the Mini PCI Express 
SSD, which offers a smaller form factor, up 
to 128GB storage with MLC flash, and up to 
64GB of SLC flash. The SSD is ideal for data 
center servers, networking, storage equip- 
ment, and other embedded purposes and is 
PCI-E 2.0 compatible, supports DDR ONFI 
2.2 flash, and has bi-directional transfer rates 
reaching 5GTps (giga-transfers per second). 

■ NovaStor NovaBACKUP xSP 12.1 
& Remote Workforce 12.1 

NovaStor announced NovaBACKUP xSP 
12.1 and NovaBACKUP Remote Workforce 
12.1. NovaBACKUP xSP is a pubhc cloud 
backup platform specifically designed for 
MSPs that features FastBIT 3 technology 
for faster transfer rates and allows IT pro- 
fessionals to view and manage multiple cli- 
ent installations from one central console. 
NovaBACKUP Remote Workforce 12.1 is a 
private cloud solution for SMBs designed to 
provide constant data availability. It protects 
company data that is sent over the Internet, 
supports Microsoft Exchange 2010, and 
includes multiple administration tools for 
easy backups and management. 

■ Open-E Data Storage Software V6 

Enhanced language support has been 
added to Open-E' s Data Storage Software. 
Previously available only in English, DSS 
is now available to Russian- and German- 
speaking users. The software has been 
updated with both language packs, which 
are available with the latest release. The new 
release also features usability improvements 
and enhanced hardware compatibility. 

■ PIVIC Tacliyon PIVI8008/PIVI8018 SPCv 

PMC-Sierra has unveiled two new high- 
performance SAS/SATA protocol con- 
trollers for SSD deployment. The 8-port 
PM8008 SPCv and 16-port PM8018 SPCv 
support the 6Gbps SAS 2.1 spec as well as 
the T-10 (INCITS) data protection scheme. 
The PM8018 can exceed 750,0001/Ops, 
PMC says. Both PCI-E 3.0-based cards are 
available now. 

■ Raxco PerfectDisk 12 

Raxco Software has announced that ver- 
sion 12 of its PerfectDisk drive optimizer is 
enhanced to save energy, reduce fragmenta- 
tion, and improve disk I/O for SSDs, virtual 
drives, and thin-provisioned hard drives. It 
proactively prevents file fragmentation from 
occurring in the first place while minimizing 
free space fragmentation, the company says. 

■ Riverbed Technology Riverbed Whitewater 

Riverbed Technology introduced three 
new Riverbed Whitewater cloud storage 
gateway models designed to optimize data 
protection. The new Whitewater 510 and 
710 models are purpose-built for SMBs, 
while the Whitewater 2010 model is de- 
signed for the midsized enterprise and 
targeted use cases in the large enterprise. 
Riverbed also offers a virtual version of its 
cloud storage gateway for data protection. 

■ Sans Digital 

TowerRAID TR4X+(B) & TR8X+(B) 

The new TowerRAID TR4Xh-(B) and 
TR8Xh-(B) from Sans Digital are 6Gbps 
SAS/SATA storage towers that support four 
and eight drives, respectively. Both are also 
available bundled with HBAs, which pro- 
vide RAID and hot spare features along with 



transfer rates of up to SOOMBps (four-bay) or 
750MBps (eight-bay). 

■ Xiotech Hybrid ISE 

Xiotech announced the general availabil- 
ity of its Hybrid ISE platform, which com- 
bines SSDs and HDDs using its application- 
aware Continuous Adaptive Data Placement 
technology. With the Hybrid ISE platform, 
admins can deploy thousands of virtual 
desktops cost-effectively with high perfor- 
mance and rapid boot-up times. It also helps 
to eliminate I/O bottlenecks for any I/Ops- 
intensive applications. 

■ Xyratex ClusterStor 3000 

Xyratex announced the ClusterStor 3000, 
a high-performance Lustre storage solution 
designed for HPC users. The ClusterStor 
3000 includes scalable storage units with 
high-capacity density and bandwidth. 
ClusterStor' s scale-out storage architecture 
enables configurations with terabytes to tens 
of petabytes of storage and from 2.5GBps to 
ITBps of actual file system throughput. 



Security 



■ Application Security DbProtect 6.3 

Application Security announced enhance- 
ments to its DbProtect platform. Version 6.3 
includes the ability to block real-time attacks 
and unauthorized activity, quarantining 
accounts that behave inappropriately while 
immediately alerting appropriate person- 
nel of the violation. In addition, DbProtect 
now includes rights management support for 
DB2 and Sybase environments, as well as 
Oracle Database and Microsoft SQL Server. 

■ Check Point Software Technologies 
ZoneAlarm 

The latest version of the ZoneAlarm 
security suite from Check Point Software 
Technologies includes advanced antivi- 
rus capabilities. The program uses the 
ZoneAlarm DefenseNet cloud-based antivirus 
tool and includes featured such as Private 
Browser mode, DataLock hard drive encryp- 
tion, SocialGuard Facebook security, and 
identity protection services, all designed to 
protect across multiple layers. 

■ NitroSecurity NitroView 8.5 

NitroSecurity has released a version of 
NitroView that incorporates new capabilities 
that improve real-time visibility and Smart 
Grid data analysis for infrastructure secu- 
rity. NitroView version 8.5 features support 
for electronic serial numbers, direct log and 
even collection from Smart Grid devices 
such as metering systems, support for spe- 
cialized industrial security devices, direc- 
tion monitoring within NitroView ADM and 
NitroGuard IPS, and expanded NitroView 
Receiver collection capabilities. 

■ Oracle Entitlements Server 11g 

Oracle has announced Entitlements 
Server 1 Ig, a component of Oracle Fusion 
Middleware llg that offers a scalable, 
externalized authorization management 
solution for applications, middleware, and 
databases. The release also gives devel- 
opers shared services for authorization to 
ensure faster compliance and the agility to 
quickly adapt policies as markets, regula- 
tions, and requirements change. 

■ SpamTitan Technologies 
SpamTitan On-Demand 

SpamTitan Technologies announced the 
release of SpamTitan On-Demand, a cloud- 
based version of its SpamTitan antispam 
and antivirus virtual appliance. SpamTitan 
On-Demand gives companies all the ben- 
efits of SpamTitan without the cost of deploy- 
ing local resources or virtuaUzation software. 
SMBs receive high availability, performance. 



and reliability in an affordable package that is 
optimized for their business needs. 

■ Stonesoft StoneGate IVIass Security 

Stonesoft's new StoneGate Mass Security 
solution features easy plug-and-play installa- 
tion and a firewall wizard, as well as support 
for redundant connectivity using Multi-Link. 
StoneGate Mass Security can be used in 
conjunction with Stonesoft's new StoneGate 
Express Firewall appliances to increase 
security at remote offices. 

■ Tenable Nessus Vulnerability Scanner 
For Android 

Tenable announced its new Nessus Vul- 
nerability Scanner, a mobile application 
designed for Android devices. The new app 
allows users to schedule scans and view 
recent reports via remote connection to their 
company's Nessus servers and gives IT 
managers an easy way to manage vulnerabil- 
ity scans when away from the facihty. 



Messaging & Telephony 



■ Cisco Telepresence Portfolio 
Enhancements 

Cisco introduced a number of new tele- 
presence products and enhancements as 
part of its collaboration portfolio designed 
to give customers new ways to simply, 
quickly, and cost-effectively scale telepres- 
ence throughout their organizations. The 
new products and capabilities are designed 
to enable "any-to-any" interoperability 
between Cisco TelePresence endpoints and 
any standards-based devices. One example 
of the new products is the MX200, which is 
ideal for team meetings or personal offices 
and priced so that customers can telepres- 
ence-enable many rooms in their organiza- 
tions. The endpoint can be set up with auto- 
provisioning and can be up and running in 
as little as 15 minutes. The MX200 has a 
list price of $21,600. 

■ Intermedia Virtual Receptionist 

Intermedia released its Virtual Recep- 
tionist for call routing and phone man- 
agement. Primary features include call 
response for local and toll-free calls, inte- 
grated voice menu, flexible scheduling, 
customizable greetings, and online admin- 
istration. Virtual Receptionist can also 
route calls across departments to ensure 
calls are always answered quickly. 

■ Nuance Communications Dragon 
NaturallySpeaking 11.5 

Version 1 1.5 of Nuance's popular speech 
recognition software for the PC adds fea- 
tures aimed at making it easier to create 
documents, send emails, surf the Web, 
share social status, and interact with 
PC-based applications. According to 
the company, the new version includes 
enhanced commands and social network- 
ing features, including the ability to search 
or post to Facebook, Twitter, or other sites. 
VI 1.5 also adds improved formatting and 
editing, and a new Dragon sidebar helps 
users find and remember common com- 
mands. In conjunction with the new release. 
Nuance has also launched Dragon Remote 
Mic, which turns your Apple device into 
a wireless microphone that can control PC 
applications via Wi-Fi. 

■ Nuance Complete Care 

Nuance has made available its inbound/ 
outbound multichannel product for custom- 
er care call centers. Complete Care offers 
a "coherent, intuitive customer experience 
across service channels." This solution is 
designed to provide customers with smarter 
automated conversations, reduce the num- 
ber of inbound calls, and offer a step-by- 
step unified customer experience. 



■ Polycom UC Intelligent Core Software 
&OTX100 

Polycom introduced its UC Intelligent 
Core software, a unified communica- 
tions platform that lets users deploy up to 
75,000 devices, from mobile devices to 
room-based telepresence offerings. Other 
features include intelligent load-balancing, 
simplified administration, lower total cost 
of ownership, and redundant auto-failover. 
Polycom also launched Polycom OTX 
100 for immersive telepresence in smaller 
deployments, the cloud-based Accordent 
Media Management System 4.5, the 
cloud-based Accordent Capture Station 
5.1, and the Polycom SoundStructure 
VoIP Interface. 

■ TIBCO Software TIBCO Web IVIessaging 

TIBCO Software announced its new 
enterprise-strength messaging solution 
for mobile and Web applications, TIBCO 
Web Messaging. The solution allows 
organizations to service the growing 
demand for information via mobile and 
Web channels with as much as 500 times 
lower Web overheads compared to tra- 
ditional HTTP. The end result leads to 
improvements in performance and reduced 
total cost of ownership, the company says. 

■ VBrick Systems VEIVIS Mystro 

VBrick Systems announced VEMS 
Mystro, a new version of its enterprise 
media management system designed to 
make video accessible, personal, and 
scalable and thus remove some of the 
barriers to enterprise IP video adoption. 
The solution is geared toward corporate, 
educational, healthcare, and governmen- 
tal environments and features a user- 
definable application experience, unified 
administrative interface, and common 
video distribution infrastructure. Mystro 
is a modular media management that can 
combine video broadcasting, videocon- 
ferencing, collaboration tools, and social 
media for collaborative broadcasts. A 
widget-based streaming design lets users 
embed IP video into essentially any com- 
munications environment. 



SERVERS! 



■ Lenovo TS130 & TS430 

Lenovo announced two new additions 
to its ThinkServer product line, the TS130 
and TS430. Both servers feature Intel 
Xeon processors and active management 
technology. The TS130 includes enter- 
prise-class storage and support for remote 
management, and the TS430 features 
room for 16TB of hot-swappable storage. 

■ SGI Nvidia Tesia 20 Series GPUs 

SGI announced availability of the lat- 
est Nvidia Tesla 20 Series GPUs in all 
of its server product lines. New Nvidia 
products, including the Tesla M2090 
and the NextIO vCORE Express 2090, 
along with the CUDA Toolkit 4.0, will 
be available in the Altix UV, the Altix 
ICE 8400, Rackable, and SGI Prism XL 
server systems. 



Clients 



■ Actuate Xenos Enterprise Server 3.0 

Actuate has released the latest version 
of its Xenos Enterprise Server output man- 
agement software. Built to simplify work- 
flow and reduce operational costs, Xenos 
Enterprise Server 3.0 supports traditional 
batch print output as well as transactional, 
multichannel electronic document pro- 
duction. Xenos ES 3.0 integrates with 
Actuate' s ActuateOne business intelli- 
gence platform. 
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PRODUCT RELEASES 



■ Datacard CardWizard 

Datacard Group announced the release 
of Datacard CardWizard version 5.3.2 
instant issuance software designed to 
support multiple hardware devices such 
as card printers, embossers, PIN entry 
devices, and encoders. The software is 
now fully integrated into the Datacard 
FP65i financial card printer; features 
include high security and cost-effective 
instant card issuance. 

■ dtSearch 7.67 

dtSearch announced a new version 
of the dtSearch enterprise and devel- 
oper text retrieval software product 
line. dtSearch products offer more than 
25 fielded and full-text search options. 
dtSearch' s file parsers highlight hits in 
popular file types, emails, and nested 



dtSearcK 

www. dtsearch.com 



attachments. A built-in Spider supports 
static and dynamic Web data. Developer 
product offers 64-bit/32-bit Windows/ 
Linux C++, Java, and .NET (through 
4.x) APIs, including support for SQL 
data and others. For more on this prod- 
uct, see page 31. 

■ GreenSQL Enterprise Edition 

GreenSQL has released an Enterprise 
Edition of its all-in-one Unified Database 
Security software that combines security 
(monitor, alert, and blocking abilities). 




caching (speeds up database response 
times), auditing (advanced reporting and 
real-time alerts to help enforce compli- 



n 1 g L 



ance policies), and masking (mask per- 
sonal identity information and credit 
card numbers) modules in one package. 
Features in Enterprise Edition include 
a database firewall engine that offers 
real-time protection against internal 
and external threats, including SQL injec- 
tion attacks, before-and-after change 
logs, active database monitoring, vir- 
tual patching, and real-time data mask- 
ing. The software-based platform can be 
installed on enterprise networks, cloud 
computing environments, and hosted 
platforms. For more on this product, see 
page 39. 

■ HP Pavilion 

& ProBool( Noteboolcs 

HP announced 1 1 new notebooks that 
feature AMD's VISION Technology, 
including the new Pavilion dv-series, 
designed for entertainment; the Pavil- 
ion g-series, designed for productivity; 
and the ProBook b-series and s-series. 
Each notebook uses AMD's VISION 
technology to improve high-definition 
graphics and videos. 

■ HP ToucliPad 

HP released two models of its Wi-Fi- 
enabled TouchPad, one with 16GB of 



internal storage and the other with 32GB. 
The TouchPad uses HP's webOS and 
can interact with webOS phones, as well. 
Multiple accessories are available, includ- 
ing a charging dock, a wireless keyboard, 
and a case. 

■ Oracle Enterprise 

Taxation & Policy IVIanagement 2.3 

Oracle released Enterprise Taxation 
and Policy Management 2.3, a secure 
commercial platform that lets tax and 
revenue authorities optimize revenue 
collection. The new end-to-end tax and 
revenue management solution is capa- 
ble of automating appeals, audit, bank- 
ruptcy, and suppression to enable faster 
and lower-risk implementations. 

■ Oracle JDeveloper 

Oracle has announced the release of 
a new version of Oracle JDeveloper, 
which includes updates to the Oracle 
Application Development Framework. 
Oracle JDeveloper llg Release 2 in- 
cludes the following updates and addi- 
tional capabilities: support for JavaServer 
Faces 2.0 and Facelets standards; updated 
ADF JavaServer Faces Rich Client Com- 
ponents (with interactive thematic 
maps); infrastructure changes for OSGi 
tooling; a new Oracle ADF Faces 
visual CSS editor; and enhanced sup- 
port for RESTful Web Services, Maven 
build process, and Hudson continuous 
integration server. The new JDeveloper 
llg release is designed to help boost 
the productivity of developers, with 
tools and capabilities that are essen- 
tial to enabling the creation of the 
Web applications. 



■ Planar d82L 

Planar announced the release of the 
Planar d82L with AccessChoice, which 
is the firm's latest slim 82-inch profes- 
sional-grade full-HD LCD optimized 
for space-constrained conference rooms, 
control rooms, and signage applica- 
tions. Features include rack-mountable 
electronics; HDMI, VGA, DVI In/ 
Out, Component Video, and HD-SDI 
ports; and support for landscape or por- 
trait orientation. 



Services 



■ ASG Software Solutions 
visionapp CloudFactory 

ASG Software Solutions announced 
the release of visionapp CloudFactory, 
a tool that's designed to allow com- 
panies to quickly and easily build 
private, hybrid, or public cloud struc- 
tures on a uniform platform, be it at 
their own facilities or in a third par- 
ty's. CloudFactory consists of three core 
modules called CloudShaper, Cloud- 
Robot, and CloudCockpit. 

■ CoreVault 

VMware vCloud Powered Hosting 

CoreVault has announced the release 
of its VMware vCloud Powered Host- 
ing service, a cloud hosting service 
designed with the stringent security 
needs of cloud computing in mind. Fea- 
tures include compliance with HIPAA, 
Sarbanes Oxley, and PCI; hosting on 
CoreVault' s SAS 70 Type II facility; 
and availability as an individual service 
for SMBs. 
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Detecting Vulnerabilities 



Continued from Page 1 
non-persistent temporary elements, col- 
lecting state information in real time. 
Agents provide information about the 
end point that cannot be determined 
remotely, such as applications or ser- 
vices that are installed but not running 
or changes in files or configuration. 

Kavanagh says persistent agents can 
be used only on devices that are known 



In general, businesses could use vulner- 
ability scanners to measure their risk level, 
says Karl Snider, manager of software as a 
service and cloud at IBM Rational (www 
.ibm.com). "Vulnerability scanners will 
identify potential risks and provide enough 
information to allow the SMB to mitigate 
or eliminate the risk of attack and data 
loss," Snider says. "A good practice is to 
assess vulnerability when an environment 



"A good practice is to assess 
vulnerability when an environment is 
initially deployed and then rescan the 
environment periodically." 



■ IBM Rational's Karl Snider 



and managed, and, thus, the vulnerabil- 
ity assessment product must be able to 
discover and report previously unknown, 
unmanaged devices. When non-persis- 
tent agents are supported by the vulner- 
ability assessment product, they can be 
deployed to discover unmanaged devices 
and provide deeper inspection capabilities. 
In environments where persistent agent 
deployment is not feasible, non-persistent 
agents can be deployed to managed devic- 
es, Kavanagh notes. 

Most vulnerability assessment deploy- 
ments rely on active network scanning, 
Kavanagh says, and there is little demand 
for products that employ only agent- 
based or passive techniques. "However, 
there are typically areas in larger IT envi- 
ronments that benefit from these tech- 
niques, and Gartner recommends that 
security-conscious enterprises use a com- 
bination of two of the three described 
techniques for comprehensive coverage," 
Kavanagh says. 



is initially deployed and then rescan the 
environment periodically." 

The frequency of scanning depends 
on how often an environment changes or 
should change. "For example, infrastruc- 
ture scanning should occur daily as sys- 
tems and components can be changed on a 
daily basis," Snider says. "Software appli- 
cations should be rescanned after every 
change, upgrade, or patch." 

Penetration Testing Simplified 

A "penetration test" typically refers 
to a style of testing that investigates 
the overall security of computer sys- 
tems, applications, and the underlying 
network environment using a variety 
of tools and techniques. Snider says. 
Such tests are often thorough and labor- 
intensive and are typically employed 
at key points, such as the release of a 
mission-critical business application, or 
to support a quarterly or annual compli- 
ance objective. 



"Penetration tests are usually per- 
formed by security testing experts," 
Snider says. "Often an SMB does not 
have this expertise available in-house, so 
they will contract with external consul- 
tants to perform this activity." According 
to Snider, using an external consultant 
can also allow an SMB to meet third- 
party validation requirements. 

Web application vulnerability tests 
focus specifically on Web applications. 
"Some security organizations will con- 
sider application vulnerability testing to be 
a portion of a complete penetration test," 
Snider says. "Web application vulnerabil- 
ity tests are designed to uncover vulnera- 
bilities that are introduced by the presence 
of Web applications." 

Although Web application vulnerability 
tests can be performed by security experts, 
automated tools are highly recommended 
to support the large number of tests across 
the entire Web application. Snider says. 
"As with penetration testing, the SMB 



may or may not have the skills on staff to 
perform the tests," he says. "Many levels 
of compliance, such as PCI, will dictate 
the frequency of these tests. It is, however, 
common for organizations to have quar- 
terly assessments and detailed tests upon 
new software releases." 

Application security test tools are very 
powerful. "They should only be used by 
trained staff and should only be used to 
assess sites that the SMB has authority to 
scan," Snider says. "Application security 
testing can have adverse affects, such 
as placing a high load on an application 
server and insertion of test data into pro- 
duction databases." 

Snider continues, "If an application is 
not robust, it is also possible to cause an 
application to crash during the applica- 
tion testing. For these reasons, a best 
practice is to only use application secu- 
rity testing tools against copies of live 
applications, and not against the produc- 
tion applications themselves." J 



Uses For Vulnerability Assessment 

Kelly Kavanagh, principal research analyst at Gartner, says vulnerability assessment technolo- 
gies will typically be used to: 

• Establish a baseline of, and changes to, vulnerability conditions for network-attached 
devices, applications, and databases, and provide ongoing vulnerability status and 
trending over time 

• Report on compliance with security configuration policy 

• Generate reports with content and format to support specific compliance regimes and 
control frameworks 

• Discover unmanaged devices or applications on networks 

• Support vulnerability remediation by operations groups with information and 
recommendations for workarounds, patches, and workflow, and through integration with 
patch management systems 

• Prioritize remediation activities through risk ratings of vulnerabilities and assets 

• Support shielding or mitigation activities through integration with protection technologies 
such as an IPS or a Web application firewall 



Are You Ready For IPv6? 



Continued from Page 1 

Migrating To IPv6 

Patrick Bedwell, vice president of prod- 
uct marketing at Fortinet (www.fortinet 
.com), sums up the scope of the prob- 
lem well. "With the recent exhaustion of 
unassigned IPv4 addresses, networks of 
every size and shape need to prepare for 
the coming IPv6 migration," he says. "In 
short, this means that every device that 
connects to an IP network will need to 
support IPv6 in the near future, as content 
and service providers begin to transition 
more of their infrastructure to IPv6." 

One of the most common strategies 
adopted by organizations planning an 
IPv6 migration is to run IPv6 alongside of 
IPv4. This allows users to access resources 
on the organization's network via IPv6 
without restricting access by IPv4 clients. 
ARIN (American Registry for Internet 
Numbers; www.arin.net), the regional 
IP address assigning authority for North 
America, endorses this approach. 

According to Nate Davis, ARIN's COO, 
"Today, the Internet is based predominant- 
ly on IPv4. For the foreseeable future, the 
Internet must run both IP versions, IPv4 and 
IPv6, at the same time." He underscores the 
importance of acting quickly, adding that 
"Deployment is already underway. Today 
there are organizations attempting to reach 
other organizations' mail, Web, and applica- 
tion servers via IPv6." 



In many cases, preparing for this transi- 
tion requires an investment in equipment. 
Enterprises must take stock of the equip- 
ment in their data centers and network clos- 
ets and determine whether it is possible to 
use it in an IPv6 environment. "To support 
the new standard, most devices will require 
an update to support IPv6 as well as IPv4," 
Bedwell says. Unfortunately, he points out, 
although many products have firmware 
updates that enable IPv6 support, there is 
still quite a bit of legacy equipment in use 
today that simply has no upgrade path. 

According to Michael Warfield, senior 
researcher with the X-Force threat analysis 
team at IBM Security Services, "The largest 
barrier to IPv6 transition is staff training," he 
says. Many network engineers have careers 
spanning several decades that took place 
exclusively in an IPv4 environment. As 
enterprises migrate to IPv6, these engineers 
will need to upgrade their skills, requiring an 
investment in training and education. 

Concerns about equipment upgrade 
costs and the available IPv6 talent pool 
may drive organizations to adopt IPv6 in 
a phased approach, bringing parts of the 
network online as equipment comes due 
for routine replacement. Mykola Konrad, 
director of enterprise product management 
at Sonus Networks (www.sonusnet.com), 
agrees, adding that "In most enterprises, 
the transition to IPv6 will not be done in 
one fell swoop. Instead, like most sig- 
nificant technology migrations, it will be 



done gradually." He describes the result- 
ing network environment as "islands of 
IPv6 connected to the IPv4 network. For 
many enterprises, the challenge isn't how 
to upgrade to IPv6 but how to manage and 
interconnect the islands of IPv4 and IPv6." 

Slow To Adopt 

There are differing opinions on the 
progress we've made toward the IPv6 
transition. From ARIN's point of view, the 
migration is moving along well. "There 
are literally thousands of enterprises work- 
ing on deployment of IPv6," Davis says. 
"We know that globally more than 6,000 
organizations have requested and received 
allocations of IPv6 address space." 

However, 6,000 organizations is a drop 
in the global Internet bucket. On top of 
that, the fact that an organization has 
received an IPv6 allocation doesn't nec- 
essarily mean that it has actually done 
anything with it. Sonus' Konrad thinks 
that the picture isn't quite so rosy. "The 
reality is that very few enterprises have 
seriously looked at IPv6 migration strate- 
gies," Konrad says. "This is mostly due to 
the fact that within their borders, they run 
legacy IPv4 equipment and still have suf- 
ficient addresses available for their needs." 
However, he thinks that the recent exhaus- 
tion of IPv4 address space, combined with 
the increased use of mobile devices, will 
lead to a trend of enterprises migrating to 
IPv6 over the next four years. 



It seems that there are some pockets of 
IPv6 adoption around the world. "Many 
educational institutions in the U.S. and 
abroad are IPv6 ready, enabled, and 
active," says IBM's Warfield. He reinforc- 
es that the phased migration is the most 
common approach taken by those enter- 
prises that are adopting IPv6. "I doubt you 
will find many who have made a complete 
transition to IPv6, as it would make little 
sense to do so," he says. 

Although IPv6 has been around for 
more than a decade, recent events make 
it more likely that enterprises will begin 
to take migration seriously. As the issue 
gains momentum, we're likely to see large 
portions of the Internet begin to support 
the newer protocol. 01 

IPv6 Adoption 
Proves Sluggish 
Thus Far 

The Computing Technology Industry Asso- 
ciation recently announced the results of 
its Business Confidence Index sun/ey. The 
400 IT shops responding to the survey were 
asked specifically about what steps they've 
taken to prepare for IPv6. At this point, only 
21% of organizations have upgraded their 
networks to support IPv6 and 31% have 
done nothing at all. 
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Intelligent PDU Solutions From Industry Leaders 

PDUs Direct & Server Technology Team To Provide IVIultiple Product Lines For Diverse Needs 



by Rod Scher 

You NEED GOOD, clean, consistent power 
for your data center, but how can you be 
sure that your valuable equipment is get- 
ting the power it needs? The only way is 
to employ reliable power distribution units 
to supply the power and to use appropriate 
monitoring units to ensure that the power 
you're getting is in fact clean, efficient, 
and consistent. 



PDUs Direct 

& Server Technology 



www.pdusdirect.com 
www.server1ech.com 

• PDUs Direct specializes in power distribution 
units that are simple, efficient, and affordable 
for data centers with basic needs. 

• Server Technology's PDUs and Sentry Power 
Manager software meet more sophisticated 
needs to provide and monitor power to mission- 
critical devices. 

• The companies work together to provide mul- 
tiple product and service channels and exactly 
the resources that will provide the best value 
and customer service for all their customers. 



Server Technology 

Salutions for the Data Center Equipment Cabinet 




PDUs 



direct 



Of course, sometimes you or your custom- 
ers need basic or metered PDUs that you can 
set up and use quickly, with minimal compli- 
cations. At other times, more complex prob- 
lems call for more sophisticated solutions, 
and those can require more thought and more 
advanced units — and often more help acquir- 
ing and configuring those units. You need a 
PDU vendor you can trust, whether you're 
seeking a simple, economical power deliv- 
ery solution or looking to equip a large data 
center with state-of-the art power distribution 
and monitoring. 

Either way, PDUs Direct and Server 
Technology are there for you. Two compa- 
nies selling the quality, reliable and trusted 
Server Technology products, PDUs Direct 
and Server Technology can work together 
to help you meet the power and monitoring 
needs of data centers large and small. Whether 
it's an enterprise-class multi-facility data cen- 
ter or a tiny server closet, PDUs Direct and 
Server Technology have what you need. The 
two companies want to provide the best cus- 
tomer service and options, no matter how you 
choose to buy. And that's what PDUs Direct 
and Server Technology have accomplished. 

Simple, Reliable PDUs, Shipped Quickly 

For simple, fast, and affordable power dis- 
tribution, turn to PDUs Direct (www.pdus- 
direct.com). As a longtime leader in low- 
cost, fast-shipping PDUs, PDUs Direct' s 
expanded offering includes affordable basic 
and metered PDUs as well as select switched 
models. PDUs Direct has been selected as the 



Master Distributor for Server Technology on 
select products and will utilize a distribution 
channel and reseller channel to deliver prod- 
ucts to customers. 

Whether it's a simple 20 A server rack 
power strip with 12 NEMA 5-20R outlets 
or a rackmount 30A 208V power strip with 
24 IEC C13 outlets, PDUs Direct has what 
you need. A selection of more than 80 basic 
metered and switched units, PDUs Direct has 
your customers' most straight forward power 
distribution needs covered nicely. 

As an approved GSA reseller, PDUs Direct 
provides some of the lowest-cost power 
distribution units in the industry and ships 
them the day after the order is placed in most 
cases. When your needs — or your customers' 
needs — are clear-cut, tum to PDUs Direct for 
quick delivery of dependable, Basic Metered 
and Switched PDUs. 

More Sophisticated Tools 
For More Complex Operations 

Need more? More sophistication? More 
features? More help? Server Technology 
(www.servertech.com) is there to provide 
the premier models of the most sophisticat- 
ed PDUs and monitoring solutions currently 
available. Server Technology's PDUs provide 
more intelligence, switched and smart PDUs, 
per-outlet monitoring, and more productiv- 
ity — and Server Technology can provide all 
the expertise you need to help you install and 
configure your PDUs. 

For a better handle on PUE, you need more 
sophisticated delivery and monitoring units. 



and Server Technology provides them in the 
form of POPS (Per Outlet Power Sensing) 
Switched PDUs such as the CWG-24V 3Ph 
PDU with 50/60Amp power distribution. 
Smart and Switched PDUs such as the CWG- 
24V can tell you if there's enough power 
available to add more devices or if you're 
close to exceeding the circuit's capacity. In 
addition. Server Technology's switched PDUs 
can control network access to remote sites and 
data center equipment via IP-based remote 
power management, and they can be con- 
figured to enable network access for remote 
power management to reboot servers and net- 
work gear individually or as a selected group. 

Of course, complex technology requires 
sophisticated management. Server 
Technology's Sentry Power Manager is the 
most accurate system you can use to measure 
and monitor your power usage. It gives you 
the data you need to make critical decisions 
regarding your efficiency and carbon foot- 
print, as well as temperature and humidity, at 
the rack level. Sentry Power Manager is the 
premium software solution for monitoring 
your network of sophisticated PDUs. Using 
SPM's Web-based interface, you can moni- 
tor and control your PDUs at the outlet level, 
view and print status logs, generate reports, 
and more, managing power distribution in a 
single data center, in centers across campus, 
or in locations around the world. 

With Sentry Power Manager and Server 
Technology's sophisticated PDUs, you're 
in complete control of your complex power 
distribution needs. 
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CoolBalance 



When you want it your way. 




Options I Flexibility | Lower Cost 



What we can do: 

■ Provide a wide variety of sizes, from 5x5 inches to 
10x24 inches (and more) 

-Square cut outs; 6x6, 8x8, 10x10 inches, etc. 
-Long and narrow: 5x10, 5x14, 5x20, 5x24 
inches, etc. 

- Circle seals for superior sealing:4 and 6 Inch 
diameters 

• Custom-build sizes at off-the-shelf prices 

What you can do: 

■ Order less than a"box"full 

■ Modify the seal for a special application 

■ Install brush to seal inside your cabinets 

•Seal your PDU 



The CoolBalance brush seal with XtraSeal™ 
technology is more effective than double-brush 
seals. XtraSeal, an im pervious yet flexible 
membrane, prevents leakage of pressurized air 
around power and data cables in floor cutouts. 



www.coolbalaiice.biz 

email: coolbalance@sealeze.com 



XtraSear 




Need Silence? 

Server Noise 
Making You Crazy? 




UCoustlc™ Server Cabinet 
reduces noise 
28.7dBA wliile 
dissipating VkW of IHeat 

That's taking a freeway and making 
it sound like a library! 

Call 866-207-6631 
for complete specs. 

RACKMOUNT" 

\W SOLUTIONS, LTD 

T Where customer servic e matters ^ 

sales@rackmountsolutions.net 
www.rackmountsolutions.net 



24u, 42u in metal 
or (6) Wood 
Finishes 

In Stock, Delivery Now 
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I Imation Buys 

Another Portable Security Firm 

Three months after acquiring Encryptx, 
Imation has purchased another company 
specializing in data protection for remov- 
able media. This time, Imation bought 
IVIXI Security of Montreal, Canada. IVIXI 
sells portable encryption and authentica- 
tion products to government agencies and 
businesses, along with OEIVI offerings for 
companies. IVIXI also fields products under 
the Stealth and Access brands. Imation 
didn't reveal the terms of the deal, although 
it did say that it expected about 40 IVIXI 
employees to transfer along with former 
MXI Security CEO Lawrence Reusing, who 
will run the new acquisition. 

I HP Disputes Oracle's 
Decision To Stop Itanium 
Development 

Three months after Oracle's decision to 
discontinue software developments that sup- 
port Intel Itanium chips, HP sent the com- 
pany a formal legal demand requesting the 
decision be reversed. HP states that Oracle 
is legally bound to continue developing soft- 
ware on the Itanium platform and will protect 
the investments of its customers. Although 
the letter was not publicly released and 
details of any agreement between the two 
companies have yet to be specified, an HP 
spokesperson states the company is willing 
to take legal actions against Oracle. Oracle's 
decision was announced in March after pri- 
vate conversations with Intel regarding the 
future of the Itanium chip. 

I ISPs Criticized On Piracy Issue 

Copyrighted material is being downloaded 
illegally at an alarming rate through ISPs, 
causing financial loss to the artists affected, 
according to music industry panelists at the 
World Copyright Summit in Brussels. ISPs 




argue they are mere "conduits" in the digital 
arena, but panelists argue that ISPs must 
go further in policing the behavior of their 
customers. Panelists argued that ISPs have 
been making a financial killing in recent 
years and that artists must be able to benefit 
from their works. Affected groups are calling 
for a change in the copyright framework to 
address the situation. 

I DoJ Launclies Probe 

Into Nortel Patent Bidding War 

The U.S. Department of Justice is investi- 
gating the auction of a number of patents 
belonging to now-defunct telecommunica- 
tions company Nortel. The intent of the 
probe is to determine whether allowing any 
one company to hold the patents would give 
that company an unfair competitive edge in 
the wireless communications market. The 
two primary companies concerning the DoJ 
are Google and Apple; Google bid $900 
million for almost 6,000 Nortel patents in 
April, and Apple was expected to make a 
counterbid before the June 20 bidding dead- 
line. The patents in question concern wire- 
less technologies such as data networking, 
4G, semiconductors, and other voice- and 
Internet-related technologies. 



PHYSICAL INFRASTRUCTURE 



CASE STUDY 



Infrastructure Products 
That Fit The Bill 

Information Support Concepts Helps Cabling Company 
Meet Its Customers' Needs 



by Nathan Lake 
• • • 

Chris Stilwell is the vice presi- 
dent of construction service for Cable By 
Design Services, which is a company that 
helps to design data centers and structural 
cable supports. At a recent job, Stilwell 
found that the customer had a basic idea 
of what it wanted, and he needed to quick- 
ly develop a bill of material that would 



of the parts, ISC even worked with a ven- 
dor to have equipment manufactured to 
match the client's needs. Even better, the 
equipment was 20% cheaper than what the 
customer would have paid if it went with a 
prominent name-brand option. 

"Whatever [Information Support Con- 
cepts] didn't have already on hand, they 
were able to come up with through their 
contacts," Stilwell says. "Information 



™ Information Support Concept5,iNc 

Leading InformajJcin Technology Product; Since 19^7 



1 



reflect the customer's fundamental goals. 
"I needed a company to research all the 
equipment, as well as the parts that go 
into the equipment, because every one 
component needed to have a bill of mate- 
rial," Stilwell explains. ISC (Information 
Support Concepts; www.iscdfw.com) was 
the company for the job. 

IVIeeting Specific Needs 

ISC is a provider of rackmount prod- 
ucts such as server racks, cabinets, PDUs, 
UPSes, KVMs, and other accessories 
for network, IT, and telecom profession- 
als. Stilwell chose Information Support 
Concepts for Cables By Design Services 
based off a recommendation from some- 
one who had worked with ISC previously. 



Support Concepts was able to produce 
parts that I wouldn't normally be able to 
get a hold of, especially given the short 
timeline the customer had given us to get 
all the equipment into place." The short 
amount of time was due to the fact that the 
customer had a structurally complete data 
center, so they were in a hurry to finish. 

Customer Service Beyond Compare 

Stilwell believes wholeheartedly that 
ISC would be able to help customers to 
find equipment that best fit their needs. "I 
would say that the legwork provided by 
Information Support Concepts was so exem- 
plary that they'd be in my top two," he says. 
The end result of the project was that Cable 
By Design was able to effectively provide 



"Whenever we ran into a headache, 
Information Support Concepts came 
up with a resolution by working directly 
with the vendor." 

- Cable By Design Services' Ciiris Stilwei! 



"Information Support Concepts was able 
to contact a number of manufacturers and 
come up with several options based on 
the client's appearance requirements and 
my structural requirements," Stilwell says. 
To fit within the budget, ISC found ven- 
dors that were able to provide parts that 
look like a particular manufacturer without 
costing as much as the parts the clients 
wanted the hardware to look like. 

"Information Support Concepts spent 
so much time and did so much legwork to 
resolve the issue," Stilwell says. "I usually 
work as a consultant and I'm on the job 
site, but in this case, I was 800 miles from 
home, so I didn't have a lot of resourc- 
es with me." ISC researched everything 
for Stilwell. "They did such a good job 
on the parts lists, bill of materials, and 
other things that all I had to do was pro- 
vide the client with a physical picture of 
what we're looking for and tell them what 
Information Support Concepts and I were 
trying to accomplish," he says. For some 



its customers with a hodgepodge of hard- 
ware, which was a requirement based on 
the necessity of the customer's goals. "The 
nature of the data center meant that not one 
line of products could offer a complete solu- 
tion for the unique design of this data cen- 
ter," Stilwell says. 

For example, all the cabling for the data 
center had to run through separate hot 
air and cold air areas of the data center, 
and Cable By Design had to be specific 
about which types of cable went into each 
area. "When we did these things, we liter- 
ally had to change product lines in one 
area and transition between product lines. 
And whenever we ran into a headache. 
Information Support Concepts came up 
with a resolution by working directly with 
the vendor," Stilwell says. 

ISC's customer service went above 
and beyond to make sure that Cable By 
Design got the products it needed to meet 
its customers' needs. "What I really liked 
was that everyone in the company pulled 



their weight individually and separate- 
ly, because whenever one wasn't avail- 
able, someone else was there to get the 
job done," Stilwell says. He adds that 
ISC maintains a company structure and 
relationship with vendors that allow it to 
effectively deliver most any rack-based 
product in a timely fashion. 

Get To Know 

Information Support Concepts 

ISC was founded in 1987 with a goal 
of providing top-notch service to all 
customers regardless of size. A corner- 
stone of this service is that anyone who 
calls should get through in three rings 
or fewer and be transferred to a knowl- 
edgeable account manager. If a ques- 
tion cannot be answered immediately, an 
answer will be found and relayed back 
via phone or email promptly. 

Key product families marketed by 
ISC are server racks/cabinets, rack- 
mount shelves, smart power/PDUs, 
KVM switches, rackmount keyboard 
monitors, wallmount cabinets, portable 
rackmount cases, technical furniture/ 
LAN racks, patch panels/cables, tem- 
perature/environmental monitoring, and 
many associated accessory items. ISC 
also welcomes requests for custom steel 
products. According to Kevin Hunt, 
ISC's vice president of sales and mar- 
keting, "Today's market has created a 
tremendous need for custom shelves 
and cabinets, and we have been very 
successful in providing quality solu- 
tions. Bottom line: If you can't find 
exactly what you are looking for within 
our product families, call us and we 
will do everything possible to accom- 
modate you." 

The complete line of ISC products 
can be found in the company's online 
catalog on its Web site. ISC keeps the 
catalog constantly updated so that cus- 
tomers will always be able to quickly 
find a current list of the products. Within 
the online catalog are full descriptions, 
pictures, and pricing information for the 
more than 2,000 available catalogued 
items. Additionally, an account man- 
ager is always just a phone call away if 
customers have questions. ISC products 
are also offered by a network of value- 
added resellers. 13 



Information Support 
Concepts 



Offers a wide variety of racl<mount products 
for networl<, IT, and telecom professionals 

"Whatever [Information Support Concepts] 
didn't have already on hand, they were able 
to come up with through their contacts," says 
Chris Stilwell, vice president of construction 
service for Cable By Design Services. 

(800) 458-6255 I www.iscdfw.com 
For more information, see our ad on page 3. 
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Sensaphone Remote Monitoring Products 

use redundant connmunication paths, built in battery 
backup, and supervised sensors to make sure that when 
something goes wrong in your computer roo 
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ITWatchDogs I/O Expander 



NEW PRODUCT 



by Joanna Clay 



Enhance Your 
Environmental Monitors 



IT ADMINISTRATORS KNOW that Com- 
puter room environments are unpre- 
dictable and that monitoring them can 
be a difficult task. But, whether you're 
monitoring temperature, airflow, water 
leaks, voltage, or power fluctuations, 
it's possible to incorporate components 
that will make climate control less com- 
plicated. ITWatchDogs offers a broad 
range of environmental monitoring 
accessories to meet the environmen- 
tal monitoring needs of its customers, 
and now, the company has released 
a new solution, the I/O Expander, to 
pair with its other environmental moni- 
toring products. 

Leading the pack as the first intelli- 
gent accessory to include 32 configu- 
rable analog inputs, the I/O Expander, 
or lOE, enhances environmental moni- 
tors by increasing their sensor and relay 
output capacity. Integrated into the lOE 
are dry contact 0-5VDC inputs, eight 
digital sensor ports, and three NO/NC 
relay outputs. 

The lOE is a highly flexible solu- 
tion, thanks to its compatibility with 



ITWatchDogs' signature line of Series II 
climate monitors. You can attach the rack- 
mountable lOE to most ITWatchDogs 
environmental monitors. 




ITWatchDogs I/O Expander 

An I/O accessory that adds 32 configurable ports to a 
Series II environmental monitor to increase sensor and 
relay output capacities. 
$479 



By augmenting your environmental 
monitors with the I/O Expander, you add 
an extra layer of control over monitoring, 
alarms, and general automation. The tri- 
ple relay outputs can activate auto-dialers, 
strobe lights, and alarm-sensitive backup 
A/C units on alarm. The I/O Expander 
runs on a 6VDC power adapter or -48DC 
power supply unit. 




ITWatchDogs 



(512) 257-1462 
www.itwatchdogs.com 
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Toll Free: 877-GAW-RACK • DataCenterDepot.com 

^= (429-7225) ^^^^^^^^^^^^^^^^ 



We are an industry leader, nationally recognized 
for the highest quality 
products and services, « 

as well as most lC^_ 
economical solutions. 






Made in the USA 



Standard & 
Seismic racks 




Numbers speak for 
themselves! 



Customer satisfaction 97. S% 
On-time delivery 95.3% 
Quality 99.0% 

Source: ISOAL 9000 CerlifkcKion Dato 



Adjustable height tables 
Wall mount racks 



Rack accessories 
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Technical furniture 



• Cable ladders 

• Cable management 

• Custom manufactured 
racks and accessories 

• Design solutions 
and free expert 
consulting 

• Rack and stack 




Equipment mounted travel case 



Call us today, receive answers today: 877-429-7225 
Give us 1% of your business . . . we'll earn the rest! 
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SiEMON VersaPOD 



NEW PRODUCT 



by Josh Compton 



Versatile Cabinets With Space-Saving 
Cable Management Systems 



For many SMEs, space is at a premium in 
the data center. Siemon's new VersaPOD 
family of cabinets and open racking sys- 
tems is designed to save space without sac- 
rificing necessary intemal components. The 
most interesting features of the VersaPOD 
systems are the Zero-U vertical cabling 
zones and vertical copper and fiber patch 
panels, or VPPs, because they take advan- 
tage of the normally unused vertical space 
between two cabinets or racks. 

"VersaPOD utilizes the vertical space 
between bayed cabinets or racks and uses it 
as a high-capacity cabling zone," says Brian 
Duval, marketing communications manager 
at Siemon. "It maximizes the data center 
capacity by allowing you to deploy and 
manage more equipment and connectivity 
in less floor space." 

With VersaPOD cabinets and racks, you 
can reduce or eliminate the use of horizon- 
tal cable managers and patch panels and 
make more room for networking equip- 
ment. The Zero-U vertical cable zones can 
hold more than 5,000 cables, and the VPPs 
support up to 1,152 copper and 1,728 fiber 
patching ports between each set of bayed 
cabinets. The Zero-U technology can also 
be used at both ends of each row to free up 
even more room. And because these cables 
have their own dedicated space, it's easier 




5 I E IVI O M 



Siemon VersaPOD 

A family of open racks, cabinets, and cable 
management products designed to take advantage of 
the free space between cabinets and racks. 

to access and make changes to the equip- 
ment inside. 

The vertical cable zones allow you to 
remove cabling from the cabinet's equip- 
ment mounting space, decreasing cord con- 
gestion and improving thermal manage- 
ment efficiency. VersaPOD systems can 
increase airflow and aid cooling systems 
and can supply up to 13kW of passive ther- 
mal capacity. 

VersaPOD cabinets are available in 
1,000mm and 1,200mm depths, and the line 
also includes four-post open racks. Both are 
designed to take advantage of the Zero-U 
cable management system and maximize 
space in your data center. A 600mm model 
is also available for servers and components 
that don't need the extra cable management 
space that the full-sized versions provide. 



) 945-4200 
www.siemon.com 



Page 14 



Processor.com 



July 1,2011 



News 



Survey Looks At 
Cloud, Virtualization 
Use In Government 

IT professionals from federal, state, and local 
government agencies would prefer to see 
their departments use hybrid or private cloud 
environments over public ones, according to 
a survey conducted by Norwich University for 
Quest Software. 

The study, "A Pulse on Virtualization & 
Cloud Computing," polled 646 IT employ- 
ees and found that 36.1% of the respon- 
dents think a hybrid (private and public) 
model would better fit their needs, while 
28.2% say that they would prefer a private 
cloud model. Only 7.3% of the respondents 
prefer a public model. One of the more 
interesting findings is that many govern- 
ment entities don't have a solid backup 
plan in case cloud computing doesn't work 
for them or there is a failure of some kind. 

'The most eye-popping thing that we talk 
about the most is the lack of an exit strategy," 
says Dmitry Kagansky, chief technologist, 
federal for Ouest Software Public Sector. 
"Over 90% don't have an exit strategy or 
don't know if they have one. Only 7% of them 
had a plan B." 




Kagansky says he is surprised that there 
is still confusion between the terms vir- 
tualization and cloud computing. In fact, 
64.6% of the respondents say they have 
at least "some level of confusion." 
Kagansky defines virtualization as being 
able to "take platforms, applications, and 
operating system and bundle them up" so 
they can be used by more people without 
investing in more onsite hardware. He 
says that cloud computing is "more about 
having ubiquitous access to data, like 
email or a database." 

Cloud-First Mandate 

Kagansky says that different government 
agencies are supporting cloud computing 
and virtualization for many different reasons, 
but one is the cloud-first mandate that was 
recently instituted by Vivek Kundra, the 
United States CIO. But even though there are 
plans set in place to increase cloud comput- 
ing programs in the next few years, Kagansky 
says it will be a slow process and one that 
will take some time to be implemented. 

"People are dipping their feet in the water 
and putting the low-hanging fruit into the 
cloud right now," Kagansky says. "They're 
going above and beyond to make sure 
all of their security worries and other 
concerns are addressed. I think they are 
three to five years out from having a fully 
matured cloud model." 

by Josh Compton 
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Boosting Data Center 
Infrastructure Management 

Simple Changes Can Make A Big Difference In Efficiency & Performance 



by Carmi Levy 

It isn't an easy time to be a data center 
decision-maker. Thanks to lingering fears 
over the state of the economy, compa- 
nies remain hesitant to increase spending 
on infrastructure. Unfortunately, as busi- 
nesses increasingly demand faster, more 
robust, and more efficient technology ser- 
vices, IT finds itself in a seemingly unwin- 
nable situation. 

There is good news, however, for shops 
hoping to optimize data center efficiency 
without impacting availability or busting 
the budget. Relatively simple tweaks to 
how existing infrastructure is managed can 
go a long way toward reconciling stagnant 
budgets and growing demands. 



Key Points 



Consider implementing storage re- 
source management to raise visibility 
into storage use and improve redun- 
dancy and robustness. 

Deploy solid-state drives tactically to 
drive performance improvements in 
application-specific areas. 

Redraw the data center roadmap with 
containerized or modular designs for 
future expansion. 



Storage Resource Management 

For data center managers looking 
for increased bang for the data center 
buck, storage is a popular place to start. 
Exploding demand thanks to the prolif- 
eration of bandwidth-heavy video and 
multimedia applications is putting pres- 
sure on conventional storage infrastructure. 
Reactive responses to business demands — 
typically involving IT throwing more stor- 
age into the fray to meet immediate needs 
without any sort of longer-term planning — 
can affect availability as well as cost. Jeff 
Godlewski, manager of enterprise server 
and storage solution architects at CDW 
(www.cdw.com), says this needs to end. 

"Many organizations struggle with 
how to effectively manage their data, 
often leading to increased costs," he 
says. "From a storage perspective, one 
of the best ways to combat this is storage 
resource management (SRM). SRM tools 
allow customers to better understand the 
utilization of disk space and can help pre- 
vent them from simply 'throwing disk' at 
a problem." 

Godlewski says SRM provides addi- 
tional visibility into how storage resources 
are deployed and used, which can in turn 
help prevent sprawl and further optimize 
backup, replication, and overall data cen- 
ter resiliency. 

New Drive Teotinologies 

Beyond management, storage resourc- 
es themselves are changing. Although the 
typical SSD (solid-state drive) is still too 
expensive on a per-gigabyte basis to directly 



replace spinning magnetic media, the tech- 
nology is beginning to come into its own as 
a tactical alternative. 

For storage managers looking to maxi- 
mize input/output operations per second, 
for example, a smaller array of SSDs can 
easily replace a larger one of conventional 
hard drives. In one instance, Alex Mei, 
CMO with the OCZ Technology Group 
(www.ocztechnology.com), says a 1 mil- 
lion I/Ops implementation would require 
4,000 hard drives, but only 20 SATA SSDs. 

"Solid-state drives can positively and 
significantly impact both data center 
efficiency and availability," Mei says, 
adding that this "drastically improves 
efficiency [and] reduces the physical 
footprint of the solution, as well as the 
power and cooling necessary to achieve 
that same level of performance." 

Mei says data centers that are already 
using tiered storage can deploy PCI-E 
SSDs at Tier for more transaction-inten- 
sive data types and SATA and SAS SSDs 
on lower tiers to bolster traditional spin- 
ning media. This drop-in approach can 
bolster both efficiency and performance. 
For data centers that haven't yet gone the 
tiered route, efficiency gains like these can 
help make the business case for tiering. 

While it's still too early for wholesale 
transition from conventional hard drives to 
SSDs, focused deployment can drive near- 
term returns. Mei says IT directors looking 
for a quick win should consider installing at 
least one SSD in each server or SAN to free 
up server host resources for other operations. 

SSDs can also benefit shops consider- 
ing a transition from networked-attached 
storage to direct-attached storage on local 
servers to boost performance. 

"Today, many IT architects do not 
employ DAS beyond a boot drive 
because traditional rotational media is 
simply too slow," Mei says. "But in 
some applications like SMB it is now 
possible to leverage the benefits of an 
SSD rather than rely on a SAN or NAS. 
This can not only improve performance 
but help reduce complexity." 

Infrastructure Considerations 

Assessing data center power, cooling, 
and bandwidth performance and needs 
can also go a long way toward identifying 



near-term opportunities for improvement. 
But CDW's Godlewski cautions against 
diving in without first understanding the 
current state. 

"While availability of those services 
and risk assessments provide opportuni- 
ties for improvement, it's important for 
organizations to document their processes 
and procedures following an assessment, 
to ensure that their improvements are sig- 
nificant and built to last," Godlewski says. 
"Too often, an organization will make 
superficial changes in response to an 
assessment and do little to actually prevent 
problems from recurring in the future." 

Godlewski recommends studying the 
entire data center cycle — from procure- 
ment to deployment and decommission — 
after the assessment is complete to bet- 
ter understand where changes need to be 
made and what benefits they'll return. 

Going IVIodular 

Although new facilities may be out of 
the budgetary question for some, organi- 
zations considering construction projects 
may want to look at alternatives to con- 
ventional buildings to hold the line on 
capital and power and cooling costs. 

Steve Wong, director of marketing at 
Wave2Wave (www.wave-2-wave.com), 
says the latest generation of modular 
or containerized data centers can pro- 
vide capacity-in-a-box with greater PUE 
(power usage efficiency) ratings than tra- 
ditional facilities because the entire box 
is optimized for power and cooling effi- 
ciency. The volumes are significantly 
denser than typical constructions, allowing 
cooling to focus on the equipment racks 
themselves. This can reduce PUE to the 
1.5 range instead of the 1.6 to 2.0 typically 
returned by the average data center — or 
upwards of 3.0 for a facility built more 
than five to 10 years ago. 

"Containerized data centers are more 
than just a data center," Wong says. "They 
are in fact the facility. The containerized 
data center is the building, with cooling, 
raised floors, fire suppression, security, and 
waterproofing capability already built in." 

Wong says this reduces construction 
costs and results in ongoing power and 
cooling savings thanks to simplified, stan- 
dardized, and more efficient designs. Q 



Data Center Performance 
Improvement Priorities For 2011 

A recent survey by Gartner confirms the following priorities for data center leaders in 201 1 : 

• 47% of respondents said data growth is their most pressing challenge. 

• 50% of respondents said business continuity and availability are the most important drivers 
of strategic change in the data center. 

• More than half of respondents plan to expand their current data center capacity; 30% are 
planning to build new data center facilities. 

• Server virtualization, application consolidation, and blade servers are the top areas for data 
center investment this year. 

Source: Gartner, "User Survey Analysis: Key Trends Shaping the Future of Data Center Infrastructure Through 2011" 
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BUYING GUIDE 




Buying Tips: 



PDUs 
& UPSes 



by Seth Colaner 

It's easy to take power for granted. 
We do it all the time in our homes 
plugging expensive electron- 
ics into the wall outlet without 
a moment's reflection on what 
might happen in the event of a 
power surge or outage or wheth- 
er it's sitting next to a heat vent. 
Usually, the worst-case scenario 
is that a computer or HDTV gets 
fried and we learn a thousand- 
dollar lesson, but IT and data center 
managers can't afford to learn about 
power the hard way. They need to 
be prepared with the right tools to 
keep their equipment and networks 
safe with power products such as a 
UPS (uninterruptible power supply) 
or PDU (power distribution unit). 

Look into smart power. In the 
past, decisions about power were pri- 
marily about amps and a few other cri- 
teria, such as the number of outlets you 
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needed. These days, however, power prod- 
ucts such as intelligent PDUs have come to 
the fore with more capabilities and more to 
think about before making a purchase. 

"Power has turned into something total- 
ly different than we ever thought years 
ago," says Kevin Hunt, vice president 
of sales and marketing for Information 
Support Concepts (www.iscdfw.com). "A 
lot of the smart power nowadays has the 
ability to do environmental monitoring as 
well as provide power." These capabilities 
allow you to set thresholds for environ- 
mental factors such as heat and humidity 
and receive notifications (whether local 
or remote) if and when those thresholds 
are exceeded. 



JBuyeis' Checklist: 
PDUs 



right voltage and amperage numbers. 

ronmental monitoring will alert you to 
and other issues. 



Smart PDUs can also measure current, 
amps, volts, and more, giving insight 
into how much power your equipment is 
pulling. Additionally, they allow users to 
control the device at the outlet level. For 
example. Hunt points out that if you need 
to switch outlets 1, 3, and 5 off or on, you 
can do so, even remotely. 

Assess power capacity. According to 
Brett Femrite, sales manager with Rack- 
mount Solutions (www.rackmountsolutions 
.net), evaluating your capacity is one of the 
first steps in making a UPS purchasing deci- 
sion. "Ensure that the equipment that will 
be connected to the unit will not exceed the 
UPS' capacity," he says. "Aim high and 
purchase a unit that exceeds your total power 
requirement by 20 to 30%." 

He further notes that by ensuring that 
you have more capacity than you currently 
need, you give yourself some leeway for if 
and when you need to add more equipment. 

Femrite also advises purchasing power 
equipment backed with an insurance guar- 
antee that protects the equipment connect- 
ed to that power device. "Carefully review 
the details of the manufacturer' s guarantee 
prior to purchase," he adds. 

Determine runtime. Of course, despite 
the benefits of environmental monitor- 
ing via smart PDUs, outages will occur, 
which is why a UPS — and the runtime 
it allows you — is so important. "[Com- 
panies] need to consider how much run- 
time they really have to have on a UPS," 
Hunt says. "They need to compute what 
is really important to them and then buy 
a UPS that's actually rated for what their 
expectation is." 
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When a "mission critical" 
data room became a 
"hot spot" after several 
upgrades, Man Steding l<ept his cool. "Tlie extreme 
weather puts an extra toad on external compressors 
and condensers — which increases maintenance 
costs." Which is why he chose the more innovative, 
cost-effective solution: IVlovinCool's self-contained, 
ceiiing-mounted CM25 air conditioner. 



The MovinCool CM Series is perfect 
for high-tech data centers. 



In addition to MovinCool's reputation for performance 
and reliability, Steding was impressed by the CM25's 
high sensible cooling capacity of 18,900 Btu/h, its 
seasonal energy efficiency ratio (SEER) of 14 and its 
compact dimensions. Sitting Just 20 inches high, it 
easily fit into the ceiling space above the data room. 
"The CM2S has all the features we need — plus an 
affordable price." 

To read more about MaTfs MovinCool success, 
vrskt:www.movi:ncool.com/allina 
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Black Box Metered Vertical PDU 



Blacl< Box's Metered Vertical PDU is a 
space-saving strip with 24 NEIVIA 5-20R 
outlets that measures and displays AC 
current. It mounts to the vertical rails of a 
cabinet or rack. 

• Three-digit LED display shows 
current draw 

• Alarm notifies you when current 
threshold has been reached 

• Includes a 15-foot (4.5m) NEMA 
L5-20P power cord 

Best For: Adding outlets in tight spaces 
while keeping track of current draw. 

Price: $185.95 

Contact: (877) 877-2269 I www.blackbox.com 



Black Box 

Outlet-Managed PDUs 




The Black Box Outlet-Managed PDU provides complete 
power control for network devices, including capabilities 
such as remote and timed individual outlet switching, auto 
on/off/reboot, load shed switching, and outlet sequencing. It 
enables power switching for individual network devices or for 
groups of equipment in an effort to allow data center admin- 
istrators to save energy by automatically powering down 
equipment at night or on weekends when it's not being used. 

• Monitors equipment power, changes in current levels, 
circuit breaker status, temperature, and unauthorized 
access attempts 

• Sends alerts by email, text, SNMP, SYSLOG, or 
audible alarms 

• Generates reports with detailed records of current and 
power consumption 

• Can be set to ping equipment at set intervals and 
reboot if there's no response 

Best For: Reducing energy and personnel requirements in 
data centers. 

Price: Starts at $676.95 

Contact: (877) 877-2269 I www.blackbox.com 



CyberPower PDU15SW8RNET 
& PDU20SW8RNET 




The PDU15SW8RNET and PDU20SW8RNET from 
CyberPower are eight-outlet rackmount networked PDUs 
that provide unsurpassed power management for IT 
installations and network devices. Using the CyberPower 
Management Console, administrators can schedule or 
manually switch individual outlets off and on to reboot 
connected equipment remotely or shut off idle equip- 
ment, minimizing network disruption and saving energy. 

• Remote monitoring and management via RJ-45 
Ethernet port 

• Audible and LED alerts with event logging to track 
power usage 

• 120V unfiltered electrical pass-through to eight 
NEMA 5-15R (PDU15SW8RNET) or NEMA 5-20R 
(PDU20SW8RNET) receptacles 

• LCD screen provides real-time monitoring of load, 
voltage, and IP address 

Best For: Organizations needing remote and local power 
management from an industrial-grade switched PDU. 

Price: $595.95 (PDU15SW8RNET); 
$759.95 (PDU20SW8RNET) 



Rackmount Solutions 
InfraPowerMT-Monitored 
Rack PDU Series 



The InfraPower MT-Monitored Rack 
PDU series from Rackmount Solutions is 
designed for mission-critical data center 
applications. The units offer local and 
remote RMS current monitoring, a digital 
RMS amp meter that is easy to read, and a 
Web-based GUI for real-time management 
and monitoring. Available in both vertical 
and horizontal form factors, the PDUs have 
between two and 24 receptacles and fea- 
ture a two-year replacement warranty. 

• Sends email alerts 

• Users can set their own alert parameters 

• Supports a range of data center output 
receptacles 

• Can daisy-chain up to 16 intelligent PDUs 

Best For: Mission-critical data center hardware monitoring. 
Price: Starts at $440 

Contact: (866) 207-6631 I www.rackmountsolutions.net 



Racktivity EnergySwitch PDUs 



Racktivity's EnergySwitch family of intelligent rack-level 
PDUs use Digital Signal Processing technology to deliver 
and monitor power within data center racks. Available 
in eight-outlet and 24-outlet versions and in single- and 
three-phase power inlets, the EnergySwitch family uses 
a microcode architecture to instantly power up. The 
EnergySwitch family features power metrics such as 
voltage, real power watts, apparent power VA, current, 
true power factor, frequency, and energy consumption 
(in kWh and kVAh). All EnergySwitch PDUs include per- 
outlet switching and metering, grouping, and sequential 
startup. A full complement of environmental sensors is 
also available, which plug directly into any EnergySwitch 
PDU to provide granular visibility into temperature, 
humidity, light, sound, motion, leakage, and airflow. 

• Instant-on functionality 

• Built on Racktivity's real-time EnergyOS operating system 

• Leverages DSP chipsets to provide power measure- 
ment capabilities using FFT analytics 

• Switching and metering all standard on every outlet 

Best For: Environments with tight budgets that need 
premium outlet-level metering and control. 

Contact: (786) 235-2634 I www. racktivity com 



Raritan Dominion 
PX Series iPDUs 




Raritan's family of Dominion PX IPDUs (intelligent rack 
PDUs), combined with plug-and-play environmental sen- 
sors and Power IQ software, provides IT administrators 
with power, environmental, and energy management 
data. The available IPDUs include outlet-metered/outlet- 
switched, outlet-metered and unit-metered PDUs, and 
inline meters. 

• Provide kilowatts per hour usage (+/- 1 % accuracy), 
current, voltage, active power, and apparent power 

• Available in hundreds of configurations to suit spe- 
cific needs 

• Easy to deploy and use 

• Power 10 can gather data from almost any PDU or 
UPS on the market 

Best For: Power, environmental, and energy manage- 
ment at the IT rack. 

Price: Starts at $425 

Contact: (800) 724-8090 I www.raritan.com 
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Compiled by Seth Colaner 



Cyber Switching 
ePower Product Family 



Cyber Switching's ePower family is targeted at data center 
managers searching for greener solutions that integrate 
rich features while providing high reliability and great value. 
Patented Individual Outlet Metering provides billing-grade 
metering for each outlet at an accuracy of 2% or better. 
Utilizing the unit's full-color LCD touchscreen or a standard 
Web browser, IT personnel can be kept up-to-date on 
critical information, including real-time power information, 
load details, input line utilization, and system status. 

• Patented Cyber Breaker technology protects equipment 
by limiting overcurrent conditions to a single outlet 

• Color LCD touchscreen for local management and setup 

• Two high-speed USB ports support up to 127 peripherals 

• 60+ high-density PDU configurations 

• Network connection for remote monitoring and manage- 
ment of your power usage 

Best For: Companies looking to implement a compre- 
hensive data center management plan. 

Contact: (888) 311-6277 I www.cyberswitching.com 



iStarUSA Group 
ClaytekWA-PD016PDU 




The WA-PD016 from Claytek (powered by iStarUSA 
Group) is a 16-outlet power distribution unit that provides 
protection from power surges and lightening. Set in a 
vertical orientation, the UPS is modular for convenience. 

• 16 outlets 

• Modular and replaceable surge unit 

• Power and surge LED indicators 

• Circuit breaker with prompt overload protection 
response 

• RoHS-compliant 

Best For: Small businesses in need of an easily managed 
PDU solution. 

Price: $110 

Contact: (888) 989-1189 I www.istarusa.com 



PDUs Direct C-16V2-C20MX 




The C-16V2-C20MX metered PDU from PDUs Direct 
provides several in-feed plug types and a local amp 
meter for the 16 NEMA 5-20R or 16 lEC CI 3 outlets. 
This PDU is designed to be mounted in the rear dead 
space to leave more space for equipment and ventila- 
tion. It also features local LED input current monitoring, 
which lets you accurately measure the amps from the 
connected power circuit, safely maximize the load, and 
reduce the risk of overloads. 

• Industrial-grade outlets 

• Steel case enclosure 

• Premium powder coat 

• True RMS reading with input current monitoring 

Best For: IT managers who need to save space for 
equipment and ventilation. 

Price: $235 

Contact: (888) 751-7387 I www.pdusdirect.com 



Server Teclinology ' Server Teclinology 

Sentry Smart CDU CS-6HD/HY Sentry 4870-XLS-44 iPDU 

& Remote Power Manager 




The Sentry Smart CDU CS-6HD/HY from Server Tech- 
nology is designed to deliver reliable three-phase power 
distribution as well as power and environmental monitor- 
ing both locally and over IP. The intelligent PDU features 
local LED input current monitoring to allow IT workers to 
measure the draw from network devices as well as the 
impact of new units on power, helping to prevent power 
circuit overloading. 

• Web-based views of power, temperature, and humid- 
ity levels 

• SNMP-based alarms and email alerts 

• Digital True RMS current monitoring 

• Uses UL 489-rated circuit breakers as an Overcurrent 
Protection Device 

Best For: High-density IT environments. 

Contact: (800) 835-1515 I www.servertech.com 




Server Technology's Sentry 4870-XLS-44 intelligent 
PDU and remote power manager is designed to help 
companies save money in the form of fewer field visits 
for servicing, faster problem-solving, better network 
availability, and more sound physical facility security. 
Encased in a 2.5U, 19-inch rackmount enclosure, the 
Sentry 4870-XLS-44 lets users restart locked-up servers 
quickly to avoid network downtime. The device integrates 
power distribution panel features with remote manage- 
ment capabilities. 

• 48VDC power 

• 70-amp power output terminal connections 

• Uses RS-232 or TCP/IP for monitoring 

• Support two external environmental sensors 

Best For: Managing equipment in remote locations and 
network operation centers. 

Contact: (800) 835-1515 I www.servertech.com 



Staco Energy Products 
Tailored FirstLine 
P&PLUPS 
Solutions 





The FirstLine P and 
PL UPS solutions 
from Staco Energy 
Products are a family 
of parallelable three- 
phrase UPS units for data center applications. The devices 
use IGBT and Digital Signal Processor control to produce 
true online double conversion. FirstLine P UPS units are 
available in 80kVA, lOOkVA, and 125kVA configurations, 
and PL units can scale from 10 to lOOkVA; both can be run 
in parallel to provide redundancy. The devices' user-friendly 
menus boast an alarm; emergency power off button; and 
LED indicators for bypass line, main line, battery powering 
the load, load on bypass, and normal output. 

• Dual bus system and dynamic dual bus system 
configuration 

• Hot-swappable 

• Require only front, top, or bottom access, so the units 
can be placed against a wall 

• Two-year warranty 

Best For: Applications where affordability, efficiency, 
reliability, availability and flexibility are essential. 



Contact: (866) 261-1191 I www.stacoenergycom 
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CLOUD TIPS & TRICKS 



Energy Efficiency In Tlie Cloud 

Though Tradeoffs Exist, 

Cloud Computing Offers Potential For Increased Efficiency 



BYDANHEILMAN 



It would seem that cloud computing is inherently energy -efficient — after all, the less 
equipment used, the less power consumed, right? However, as with most questions that 
seem to have simple answers, the reality is a bit thornier 



The Potential Exists 

The most accurate answer to the ques- 
tion "Is cloud computing energy-efficient?" 
seems to be: Well, it can be. According to 
Todd Steinmetz, owner of Compurity, there 
are massive server farms all over the world 
that use tremendous amounts of electric- 
ity — Google, for example, has large server 
farms located all over the world that con- 
sume as much energy as a small town. 

However, he says, most cloud comput- 
ing systems are nowhere near such a mas- 
sive scale, and many have the potential to 
deUver energy efficiency. "There is server 
technology available that is 25% the size 
of a normal server rack and consumes 
25% less electricity," he says. 

The cloud computing trend has brought up 
concerns by environmental groups due to the 
massive amounts of power needed to run. 
And indeed, a 2010 study by the University 
of Melbourne in Victoria, Australia, found 
that certain types of cloud computing are not 



very energy-efficient at all. Using the cloud 
for data storage is the most energy-efficient 
use of the technology, the Melbourne study 
found, because at low usage levels, there's 
little energy spent on data transport and most 
of the power consumption goes to storage. 

Users should also be aware that how 
energy-efficient a cloud service is might 
depend on what type of service it is — stor- 
age, software, or processing — as well as 
whether it's on a private system or a pub- 
lic cloud hosted on the Internet. 

Finding Efficiencies 

While data centers that house cloud 
computing infrastructure do require a large 
amount of electricity to run systems and 
provide cooling, there are efficiencies to 
be found, such as consolidation of ser- 
vices, according to Eitan Bremler, product 
marketing manager for virtualization at 
Radware (www.radware.com). 

"In our experience, cloud service pro- 
viders are cost-driven and are incented to 




reduce electrical consumption from infra- 
structure and cooling costs," he says. 
"Therefore, technologies that can provide 
more with less, like infrastructure virtualiza- 
tion, can help [keep energy costs down]." 

Data centers with cloud buy-in can 
reduce their energy footprint in numerous 
ways, including migrating applications 
and workloads to the cloud. In doing 
so, enterprises and data centers directly 
reduce their energy footprint: Because 



fewer servers are now needed, this means 
fewer power and cooling requirements, 
Bremler says. 

"IT managers should calculate how 
much energy, power, and cooling they can 
save by moving to the cloud, in terms of 
server, networking, and ADC hardware," 
he says. "They should do this while taking 
into account the huge change in the way 
they will manage their data center once 
migration to the cloud has taken place." Q 



Best Tip: Keep Track Of Usage 

However you decide to make your data center more energy-efficient, it's important to tracl< 
the amount of power consumed, especially if you're running a private cloud in your own 
facility. Implementing a private cloud can have serious effects on a data center, according to 
Bob IVIobach, practice director for data center infrastructure at Logicalis (www.logicalis.com). 

Sen/ers that become virtualized require specific power and cooling needs, and power con- 
sumption fluctuates when virtual machines are spun up and down. For these machines, 
you need to seek out smart power solutions and monitored distribution paths, Mobach says. 

"While your private cloud is responding to changing business demands on the front end, the 
back end of the cloud in your data center needs to be able to respond to changing demands 
for power and cooling," he says. 



Physical Infrastructure 




Sentry Power Manager (SPM) 

SPIVI is a 1U appliance and software package capable of 
monitoring and managing multiple PDUs in IP-based 
enterprise networks. 

• Global view of power 

• Temperature monitoring 

• Trending, graphing, and reporting 

• Manage outlets globally 



Group outlets or branches 
Database to store 
information 
Auto-discover PDUs 



Server Technolosv, Inc. 



Server Technology Inc. 

(800) 835-1515 
www.servertech.com 
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Per-Outlet-Power-Senslng (POPS) CDU 




Power Information 




Per Outlet Includes: 




• Current load (A) 




• Voltage (V) 




• Power (kW) 




• Apparent power (VA) 




• Crest factor 




• Power factor 




This information can be used to 




calculate the PUE and DCiE from 




The Green Grid, which in turn 




will allow data center managers 




to make informed intelligent 




decisions about their facilities. 




Server Technology Inc. 


1M| Server Technolosy (soo) B35-i 515 


www.servertech.com/products 



Physical Infrastructure 




CS-6HD/HY 50/60A 3Ph 6xL6-30R 

Introducing the unique 50/60A three-phase Smart CDU 
designed especially for Cisco Nexus 7000s. 

• A NEIVIA locking outlet solution for high-density applications 

• Reliable three-phase power distribution 

• Local and remote power monitoring and environmental 
monitoring via IP 

• Link to an expansion unit for more outlet 



Server Technolosy 



Server Technology Inc. 

(800) 835-1515 
www.servertech.com 
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Buying Tips: 

Data 

Center 

Furniture 



by Blaine Flamig 

If only buying data center 
furniture were as easy as walk- 
ing into a store, pointing at var- 
ious items, and declaring, "I'll 
have that, that, and that." But, 
alas, things are a bit more com- 
plicated. The following advice 
from several experts will help 
ease the task. 

Form and function. Before 
buying furniture, do some planning 
first, says Rackmount Solutions 
Account Manager Susan Wynne 
(www.rackmountsolutions.net). 
"Know the function of the room. 
Have in mind a design or layout 
of the space you're wanting to cre- 
ate. A sketch or draft of the room 
with the various components in place 
is helpful," she says. Additionally, 
know the dimensions of the space and 
furniture to ensure you meet require- 
ments. Also helpful is knowing how a 
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workstation will be used and by how many 
people to ensure overall comfort. 

For companies with multiple users plying 
away over 24-hour shifts, "height adjust- 
ability/maneuverability is a must," says 
Office Organix President Jennifer Monroe 
(www.officeorganix.com). Beyond help- 
ing avoid static seated postures and fatigue 
from sitting, she says, "it's common knowl- 
edge that multiple postures over the work- 
day lower the risk of injury on the job. 
Most high-end electrically adjust- 
able IT furniture manufacturers 
offer an excellent warranty on the 
motor or moving parts, too, so the 
concern about breakdown or repair 
is minimal." 

Weighty issues. Other consid- 
erations to keep in mind include 
built-in grommet cable manage- 
ment and power-port features to 
manage connections and wiring, 
Monroe says, as well as warranty 
stipulations and weight specifi- 
cations/limitations. "Some 'fine 
print' often says that overall a 
unit may accommodate a total 
of 1,000 pounds, but if you read 
closely, per-shelf weights are 
quite different," Monroe says, 
so "avoid overloading and nul- 
lifying the warranty." 

Kristen Speranza-Diamond, 
vice president of Hergo (www 
.hergo.com), says that it's 
important to stay up-to-date 
with changing technologies. 
"All of the equipment and 
LCDs are becoming much 



Key Terms 



Adjustable height. Refers to components 
users can raise or lower for a better indi- 
vidual fit. Some higher-end furniture can be 
adjusted electronically. 

Cable management. Built-in grommets, 
channels, or other features to manage 
cables and wiring. 

Modular. Furniture components that are 
interchangeable or can be easily modified. 

Recessed. Platforms that sit lower than the 
tabletop itself, sometimes at an angle, to 
allow for easier viewing of monitors. 



less expensive, so everyone is upgrading 
and making the transition to go compact," 
she says. Thus, flat-panel arms are more 
important than ever in terms of addressing 
space efficiency and ergonomics. "With 
the economy still in a precarious state, 
office and lab space is at a premium, and 
it's beneficial to go vertical and make the 
best use of square footage," she says. 

Know the maker. Doing your due dili- 
gence to find a trustworthy, reliable vendor 
is important, says Eli Hertz, Hergo CEO 
and president. "You want a vendor that you 
can invest in for the future. You don't want 
to deal with a company that will only be 
around for a one-time purchase." Similarly, 
search for a vendor that can offer a com- 
plete solution, says Speranza-Diamond, so 
you're not in a position of having to go to 
multiple vendors to complete a project. 



Staco FirstLine P & PL UPS Solutions 



NEW PRODUCT 



by Marty Sems 



Keep The Power Flowing 



When your data center's power is 
down, a Staco Energy Products UPS 
may be just what you need to maintain 
business continuity. 

The company's FirstLine P and PL 
UPS Solutions are three-phase power sup- 
plies with dual AC inputs. They're double- 
conversion, online UPS units that benefit 
from IGBT rectifier and DSP technology. 
The units are suitable for high-availability 
environments such as hospitals, industrial 
environments, and broadcast facilities. 

The FirstLine P is the bigger brother 
of the two. It features a front panel dis- 
play, and its 80kVA, lOOkVA, and 
125kVA variants are all 75 inches tall. The 
FirstLine P runs on 480V, three-phase, 
three- or four-wire AC power, but custom- 
ers can specify an optional IP transformer 
for a 208V system. 

Staco reports that the FirstLine P man- 
ages up to 98% efficiency with an input cur- 
rent distortion of 3% or less. Its input power 
factor is 0.99. There's no power penalty 
for using the FirstLine P with a capacitive 
load such as a blade server, Staco says. The 
unit also filters out harmful reactive power 
and harmonics attempting to head upstream 
from the load systems. 

The FirstLine P weighs less than many 
competing designs and comes with a gal- 
vanic isolation output transformer. Options 
cover a range of communication protocols, 



TACO 
NERGY. 




PRODUCTS CO. 



Staco Energy Products FirstLine P & PL 

Efficient, reliable uninterruptible power supplies that 
support a variety of power configurations, keeping 
mission-critical data centers up and running. 

seismic and harsh environment consider- 
ations, and an extemal maintenance bypass. 
The model has a two-year onsite warranty 
on its electronics, with a one-year full/1 0- 
year prorated warranty supplied by the 
manufacturer of its batteries. 

The FirstLine PL is a 10 to lOOkVA 
model with unit heights ranging from 
44 to 74 inches. It's a 208VAC UPS, 
although it's possible to run it on 480V 
using an input transformer option. 

The FirstLine PL runs at up to 95% effi- 
ciency with a low 4% total harmonic dis- 
tortion level. Its power factor correction 
results in a power factor of 0.99 or higher, 
Staco says. Options include a CANBUS 
parallel card and galvanic isolation trans- 
former, along with many of the options 
listed for the FirstLine P. The PL has a 
two-year full warranty. 



(866) 261-1191 
www.stacoenergy.com 



Access Cable Trays ACT/FloorFlex System 



NEW PRODUCT 



by Marty Sems 



What's Under Your Feet? 



Strong, modular, and smart — these 
are the goals of Access Cable Trays, man- 
ufacturer of the innovative ACT/FloorFlex 
System. This family of raised flooring 
building blocks is intended to be easy to 
install and a snap to reconfigure, yet stout 
enough to install and forget. 

FloorFlex comes with integrated cable 
management features that make it a 
no-brainer for cable tray applications, 
allowing maximum airflow under your 
data center, switch room, or office. It's 
designed to install easily, even if you 
need to retrofit it into an existing raised 
flooring setup, thanks to components that 
drop, snap, and slip into place. 

Its 24- and 48 -inch modules take full 
advantage of the standard 2- x 2-foot grid 
spacing, while the 18-gauge construction 
of its horizontal supports gives you peace 
of mind under heavy loads. There are stan- 
dard and mini-tray parts in the product line 
to accommodate the specific characteris- 
tics of your environment. And there are 
seismic components available, too. 

The FloorFlex system is optimized for 
easy vertical support height adjustment. It's 
also available in two- or three-tier configu- 
rations for multilevel installations, but it's 
stackable and has no maximum height Hmit. 




FloorFlex can put your cables within 
two inches of the floor surface for effort- 
less access, and it can be low profile — as 
little as 1.25 inches tall — for tight fits, such 
as under the floor of an office. 




Access Cable Trays ACT/FloorFlex System 

Modular, strong raised flooring parts for a 
low-TCO installation 



Built in the United States, the ACT/ 
FloorFlex system is engineered to save 
you money over time. In addition to being 
physically tough to resist wear and tear, it 
also allows for fast rerouting to keep your 
labor costs low. And it's a simple matter 
to ensure electrical continuity throughout 
your installation with ground splice clips. 



ACCESS CABLE TRAYS, INC. 



(866) 777-2576 
www.accesscabletrays.com 
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ata Center Furniture 



Data Center Depot Hercules 
LAN Station 




The Hercules LAN Station has an industrial-strength, 
super heavy-duty four-post frame and measures 84 x 
72 X 36 inches. It's easy to assemble and has a 72- x 
36-inch work surface, two upper shelves (72 x 24 inch- 
es), two steel legs with levelers, and three horizontal 
back panels. 

• Shelves can hold up to 800 pounds and are adjust- 
able in 1-inch increments 

• Legs are made of 14-gauge tube steel 

• Shelves are steel-reinforced and have high-density 
laminate 

• 72-inch-high frame available for the same price as 
the 84-inch model 

• Available in a variety of sizes 

• Lifetime guarantee 

Best For: Data centers in need of an easy-to-assemble, 
industrial-strength LAN station. 

Price: Starts at $1 ,020 

Contact: (877) 429-7225 1 www.datacenterdepot.com 



Data Center Depot Samson LAN Eaton Wriglit Line Profile 



Station 




The Samson LAN Station features a super heavy-duty 
cantilever frame and measures 84 x 48 x 36 inches. 
The work surface measures 48 x 36 inches, and the two 
upper shelves measure 48 x 24 inches. The Samson 
comes with two horizontal back panels. 

• Shelves can hold up to 450 pounds and are adjustable 
in 1-inch increments 

• Legs are made of 14-gauge tube steel 

• 72-inch-high frame available for the same price as the 
84-inch model 

• Lifetime guarantee 

• Free consultation 

• Available in a variety of sizes 

• Optional accessories, including mobile server cart and 
pull-out keyboard shelves, are available 

Best For: Data centers in need of a super heavy-duty 
LAN station that is easy to adjust or expand. 

Price: Starts at $966 

Contact: (877) 429-7225 1 www.datacenterdepot.com 



Advanced Console System 




Created specifically for high-density flat-panel display 
monitoring applications, Eaton Wright Line's Profile 
Advanced Console System features a sophisticated, ver- 
satile design that makes it ideal for a multitude of tech- 
nology-intensive environments. Created with ergonomics 
in mind, the Profile system is available with manual 
height-adjustable keyboard platforms as well as single, 
dual, or heavy-duty electronic height-adjustable work 
surfaces. The system is ideal for mission-critical environ- 
ments in which sit-to-stand accommodation is desired. 

• Flexible, modular, and scalable 

• Ergonomically designed with height-adjustable lifts 

• Individualized personal controls 

• Flat-panel mounting solutions 

• Expert tech integration 

• Guaranteed for lifetime of equipment 

• Versatile, customized, collaborative system design 

Best For: Emergency/91 1 dispatch operations, network 
operation centers, mission-critical environments, process 
control environments, medical imaging reading rooms, 
and trading floors. 



Product 



Description 



HergoUNI8436 Workstation 




The UNI8436 Workstation provides a setup that com- 
bines everything a company needs to get the job done 
in a single, compact frame assembly. 

• 11 GA metal-slotted frame measuring 84 x 36 
inches (HxW) 

• 36- X 30-inch (WxD) laminated desktop with 
articulating keyboard tray 

• Two 18.5-inch-deep mounting shelves with upward 
or downward brackets 

• Leg-mounted CPU holder 

• Track-mounted flat-panel arm 

• Optional 60-inch-long vertical cable management 
and eight-port power strip 

Best For: Small or home offices where conserving 
space is necessary. 

Price: $980 

Contact: (888) 222-7270 I www.hergo.com 



Rackmount Solutions 
Heavy Duty LAN Rack/ 
Computer Station 




The Heavy Duty LAN Rack/Computer Station from 
Rackmount Solutions is designed for heavier equip- 
ment loads, with each shelf supporting more than 850 
pounds. All shelves are adjustable in 1-inch increments 
and may be placed anywhere on the frame. This work- 
station features a high-quality tube steel frame and 
unlimited variations when combining different LAN sta- 
tion widths, plus corner stations. 

• Fully welded four-post frame with 2-square-inch, 
14-gauge steel virtually eliminates vibration 

• 14-gauge steel horizontal back panels for maximum 
strength and stability 

• Available in 36-, 48-, 60-, and 72-inch widths; 84 
inches high 

• 1.25-inch-thick work surfaces support more than 850 
pounds each 

• LAN rack ships fully enclosed in a shipping crate to 
protect from damage 

Best For: Anyone who needs shelving that can support 
heavy loads or flexible configurations. 

Price: Starts at $1,154 



Rackmount Solutions Recessed 
Monitor Corporate Training 




Rackmount Solutions heavy-duty Recessed Monitor 
Corporate Training Tables allow plenty of surface 
space for manuals and workbooks while giving users 
lines of sight to the moderator and any video instruc- 
tions being displayed in the front of the room. These 
tables are customizable with a variety of LCD mounts 
and keyboard trays. 

• Choose from stock 36-, 48-, 60-, or 72-inch widths or 
a custom configuration 

• Dropped monitor platform is on a 22% angle, 4 inches 
in front and 7 inches in back, for clear view of instructor 

• 14-gauge steel legs and a 1.25-inch-thick laminated 
table surface make these units almost indestructible 

• Table adjusts from 26 to 32 inches high to accommo- 
date various employee heights 

• Includes out-of-sight cable management under the 
table surface 

Best For: Corporate training areas that require versatile, 
highly durable tables that must cater to multiple users 
and frequent ergonomic adjustments. 

Price: Starts at $308 



Contact: (866) 207-6631 I www.rackmountsolutions.net 
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Processofs Product Spotlight highlights options available in key data center product categories, providing product information side-by-side for easy comparison. 

Compiled by Blaine Flamig 



Eaton Wright Line LMS 
(Laboratory Management 




Totally modular and scalable, Eaton Wright Line's LMS 
(Laboratory Management System) provides the highly 
efficient design and configuration capabilities required 
in today's analytical, computer, and electronic labora- 
tory environments. The LMS helps create efficient work 
space and easy modular configuration/reconfigura- 
tion, including heavy-duty storage solutions located 
above and below the work surface, to maximize verti- 
cal space, thus allowing companies to maximize any 
workstation footprint. 

• Full frames support components of various widths 

• Available in nine widths and four heights 

• Reverse I-beam construction; constructed with 
12-gauge steel 

• Superior leveling capability 

• Unique trapezoid-shaped hooking mechanism 

• Oversized vertical and integrated cable management 

• Rigid, black tubular stabilizers and double-strength 
welded frame 

• ANSI/BIFMA-certified performance 

• Lifetime warranty 

Best For: Data centers, computer labs, electronic labs, 
and PC repair. 



Eaton Wright Line LCD Lift 




Eaton Wright Line's patented LCD Lift is an innovative 
flat-panel solution that's designed to offer simplicity 
and security. The lift recedes into the desk to com- 
pletely transform the workstation into a multipurpose 
platform while providing security and safety for the 
enclosed monitor. 

• Space-efficient constant-force spring mechanisms 

• Integrates into most 15- to 19-inch LCD flat-panel 
displays with VESA-compatible screen mounts 

• Lifts out at the touch of a button 

• Noiseless 

• Technology can be specified to fit Eaton Wright Line's 
LINX modular work surfaces 

Best For: Education and training environments, monitor- 
ing centers, computer labs, lobby/reception areas, and 
personal workstations. 



Hergo Personal 
Worl<station 




The Hergo Personal Workstation is a fully modular right- 
or left-hand user solution. Designed for a single- or dual- 
monitor setup, this high-profile system provides maximum 
vertical mounting space for overhead storage and suspend- 
ed or track-mounted flat-panel screen management. 

• Double 11 GA metal-slotted frame unit measuring 
84 X 60 inches (HxW) 

• 72- X 30-inch (WxD) laminated desktop with left or 
right return (18-inch deep); also available in 60- x 
30-inch configurations 

• Monitor track shelf with LCD suspension system 

• 18.5-inch-deep mounting shelves with upward or 
downward brackets 

• 30-inch-wide metal-locking storage compartment 
with laminated, hinged flip-up door 

• Power and cable management options 

Best For: Multitaskers who require additional work 
surface and storage space. 

Price: 84- x 60-inch unit with 72-inch L desktop is $2,745 with 
monitor suspension, file cabinet, and side panels, or $2,1 95 
for track-mounted LCD and no file cabinet or side panels. 

Contact: (888) 222-7270 I www.hergo.com 



Uptime4u EDP Contour Advance 
Data Center Console 



Racl<mount Solutions Bravo 
Power Corporate Training 
Tables 




Uptime4u Anthro Elevate 
Electric Lift Corner Dispatch 
Console 




Bravo Power Corporate Training Tables from Rackmount 
Solutions make it easy to connect your monitor, an Internet 
connection, and additional peripherals to Rackmount heavy- 
duty corporate training room tables by using a recessed, 
pop-up, or under-table power source. These tables are cus- 
tomizable with a variety of LCD mounts and keyboard trays 
and are ideal for environments where a power source on the 
table enhances usability and convenience. 

• Choose from stock 36-, 48-, 60-, or 72-inch widths or 
create a custom configuration 

• Common power modules used are two CAT 6 RJ-45 
and two 15A/125V receptacles with circuit breaker, 
but modules can be interchanged to fit your needs 

• Heavy-duty 14-gauge steel legs and a 1.25-inch- 
thick laminated table surface make these units almost 
indestructible 

• Superior strength with support for up to 900 pounds 

Best For: Corporate training areas that require versa- 
tile, highly durable tables with the convenience of power 
built in. 

Price: Starts at $439 



The Anthro Elevate Electric Lift Corner Dispatch Console 
available from Uptime4u utilizes the space-saving design 
of a corner console combined with the ergonomic benefit 
of an electhc-lift adjustable-height unit. Six or more flat- 
panel monitors can be fully utilized while keeping every- 
thing within easy reach of the user. Network cables are 
efficiently routed to prevent work surface clutter. 

• Fits true to corner and utilizes every inch of wall space 

• Console height adjusts quickly and quietly at 1.5 
inches per second 

• Maximum flexibility with keyboard/mouse platform that 
swivels, tilts, and moves in and out and up and down 

• Sturdy steel legs are mounted solidly to base and frame 

Best For: Data centers, control rooms, computer 
rooms, and dispatch and 91 1 centers where users 
need ergonomic adjustability and modular design in a 
heavy-use environment. 

Price: Starts at $3,500 




The EDP Contour Advance Data Center Console avail- 
able from Uptime4u offers easy adjustment of sit/stand 
features at the press of a button. Ergonomic design 
combines with durable construction, flexibility, and 
well-planned wire management in this console solution. 
Numerous configurations are available for your specific 
needs, including single, double, and team workstations. 
This console is engineered to withstand frequent usage 
and to meet public safety sector standards. 

• All-steel frame construction offers long-term resilience, 
even in 24/7 multishift environments 

• independent height adjustments for keyboard and 
monitor deck 

• Accommodates a range of accessories, including 
display arms, whiteboard inserts, and acoustical 
fabric wraps 

• Secure storage of dedicated CPU modules either 
beneath the work surface or in a matching enclosure 

Best For: Demanding call center and public safety envi- 
ronments that must be up and running 24/7. 

Price: Starts at $8,000 



Contact: (866) 207-6631 I www.rackmountsolutions.net 
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I study Shows Disconnect 
Between Expectations & Reality 
Witli Newer Tech 

Expectations and reality often don't match 
up when it comes to businesses moving 
certain aspects of IT to a virtual or hybrid 
cloud model, according to a recent report 
by Symantec. The "2011 Virtualization and 
Evolution to the Cloud Survey" also notes 
concerns about the reliability, security, 
availability, and performance of business- 
critical applications in those environments. 
Of those surveyed, server virtualization 
projects were most successful, with just 
a 4% gap between expected and realized 
goals. When it comes to storage-as-a- 
service deployments, though, the gap was 
37%. Endpoint/desktop virtualization had 
a 26% gap between expected and realized 
goals, while storage virtualization had a 
33% difference. 

I IVIanagers & Recruiters 
Expect To Hire IVIore IT Pros 

About 65% of managers and recruiters 
who source, recruit, and hire IT profes- 
sionals expect to hire more tech pros in 
the second half of this year vs. the prior 
six months. That's according to a report 
by Dice.com, which states that, despite 
a surge in hiring that has pushed the 
tech unemployment rate below 4%, 




competition for tech talent continues to 
escalate. Hiring growth climbed so much, 
Dice.com reports, that positions are remain- 
ing open for months. Of those who reported 
hiring times are lengthening, Dice.com 
states that 63% cite talent shortages as the 
primary reason; 46% reported the same six 
months ago. Pay-wise, 47% of hiring man- 
agers and recruiters report that salaries are 
slightly or significantly increasing for new 
hires vs. 29% six months ago. About 34% 
of corporate recruiters expect to count on 
outside sources more often in the second 
half of this year to find tech talent compared 
to 29% in November 2010. Across the 
country, the most difficult skill-set or posi- 
tion to fill is Java developers, followed by 
mobile, .NET, and SAP developers. 

I IT Increasingly 

Left Out Of SaaS Purchases 

SaaS purchasing decisions are being 
made not by IT personnel, but by business 
vice presidents, according to a survey by 
Forrester Research titled "The SaaS Market 
Hits IVIainstream: Adoption Highlights 
201 1 ." About 56% of respondents indicate 
that business groups, not IT groups, are the 
primary drivers of SaaS purchases; these 
items include applications for business 
processes such as CRM, HR, and email. 
For industry-specific SaaS purchases such 
as claims processing and hospital manage- 
ment, business personnel are driving 49% 
of those purchasing decisions. Forrester 
indicates that the findings seem to show 
that SaaS purchasing is more mainstream 
now than before. 



NETWORKING & VPN 



SIX QUICK TIPS 



Upgrading Your Network 

Cooling & Cabling Are Among Factors To Consider 
For A Successful Network Upgrade 



by Dan Heilman 

Upgrading or overhauling a net- 
work can be a daunting task for even the 
most confident and seasoned data center 
manager. Once you've done a complete 
assessment of your network needs, you 
need to figure out not only what you 
need now, but what you might need in 
five or more years, and you must also 
determine total cost of ownership and 
which components have the best return 
on investment. 

Here are a few tips to make your next 
network overhaul a little less taxing. 

Go All In 

Some experts feel that when it comes 
to overhauling a network, doing it all at 
once by employing a so-called "fork- 
lift" upgrade makes the most structural 
and financial sense. That can apply not 
just to hardware, but also to cabling and 
other seemingly minor ingredients in your 
upgraded network. 

"If you attempt an ad-hoc replace- 
ment approach of equipment, piece 
by piece, over a long period of time, 
you'll find lots of problems," says Jay 
Botelho, director of product manage- 
ment at WildPackets (www.wildpackets 
.com). "However, with the forklift up- 
grade, you'll be getting the best return 
on investment, since you will experi- 
ence minimum downtime and little to no 
incompatibilities [you might get] with an 
ad-hoc upgrade." 

Forklift upgrades can also provide an 
opportunity to resolve lingering problems 
associated with mismatched network 
components, notes Botelho. A good way 
to avoid mismatches is to stick with a sin- 
gle vendor for specific technology types. 

"Getting your network back online as 
quickly as possible — with a new system 
that can adequately handle your network 
traffic with headroom — is essential to hav- 
ing a network and business function prop- 
erly," Botelho says. 

Go With Structured Cabling 

Designed to accommodate fast and fre- 
quent changes to a network, a structured 
cabling system can go a long way toward 
preventing workflow disruptions and net- 
work downtime that can hamper enter- 
prise restructuring. It's growing in use 
because its flexibility allows it to support 
all applications. 



I "Structured cabling allows you to 
change connectivity at the patch cords 
area instead of recabling the whole data 
center," says Eric Leichter, manager of 
training and technology at CommScope 
(www.commscope.com). "There is some 
additional cost up front, but it is much 
cheaper in the long run." 

Leichter also suggests planning your 
architecture based on more than just the 
current application — you may not have a 
need right now for a certain bandwidth, 
type of cabling, or number of fibers or 
copper pairs, but you might need it by 
the second or third technology refresh. 
"Put in enough infrastructure today 
so you don't have to come back every 
three years to support new applications," 
Leichter says. 

Keep It Cool 

Cooling challenges are constantly on 
the minds of network managers. Most 
current solutions, however, address cool- 
ing at the environmental level and not the 
device level. Liquid cooling can attack 
the problem at the device level with total 
liquid immersion. 

"By submerging all of a server's heat- 
generating components in a dielectric 
liquid, thermal energy is continuously 
carried away from the internal compo- 
nents of the server, eliminating the need 
for costly and inefficient air-cooling 
systems," says Chad Attlesey, presi- 
dent and CTO of Hardcore Computer 
(www.hardcorecomputer.com). Attlesey 
adds that liquid cooling can reduce 
energy costs, maintenance expense, and 
facility spending. 

According to Attlesey, the construc- 
tion cost of a 3.2-megawatt data pro- 
cessing suite built with conventional 
air-cooled architecture is 32% greater 
than that of a data processing suite with 
identical compute capacity using a top 
liquid-cooling platform. 

"In addition, the conventional suite 
takes six times more cooling energy," he 
says. "This translates to a total-cost-of- 
ownership penalty for the air-cooled suite 
in this study of $1.7 million per year for 
15 years." 

Let Your Network Grow With You ' 

One tip network engineers should 
consider is making sure that data center 
deployments for WAN optimization are 
scalable enough to deal with the higher 



BONUS TIPS 



■ Have a backup for your 
backup's backup. Murphy's 
Law, which states that what- 
ever can go wrong will go 
wrong, is a fact of life in data 
centers. IVIake sure the disas- 
ter prevention and disaster 
recovery aspects of your 
upgraded network are solid 
and multileveled. 

"Re-architect your IP map 
and disaster recovery map 
based on the expansion 



and consolidation you plan 
over the next three years," 
says Aninda Bose, head 
of sales and marketing at 
NUT Technologies (www 
.niit-tech.com). "Create 
Plan A as well as Plan B 
and Plan C." 

■ Shop around. Being loyal 
to a provider can be reas- 
suring, but as you plan your 
network upgrade, take a hard 
look at where your product 



and service vendors stand 
now vs. when you last worked 
with them. 

"Equipment life cycles are in 
the five- to 10-year range," 
says Jay Botelho, director 
of product management at 
WildPackets (www.wildpack 
ets.com). "A lot of things can 
change over that time, and 
your vendor of choice five 
years ago may not be the 
industry leader anymore." 



Best Common-Sense Tip 

Don't Overlook 
Training 

Just because you understand the ins and 
outs of your new network doesn't mean 
your staff does. Consider a focused train- 
ing program to bring everyone up to speed 
when major upgrades are implemented. 

"At the time of a network upgrade, the 
hardware and software may be state of 
the art, but the people who orchestrate the 
technology may have widened skill gaps 
associated with utilizing the new technol- 
ogy," says Arthur Kisby, an account execu- 
tive with training company New Horizons 
(www.newhorizons.com). Training can 
be a good way to make sure everyone's 
knowledge base about the upgrade is on 
the same level. 

Easiest Tip To Implement 

Don't Upgrade 
At All 

Make sure an upgrade or replacement is 
needed and that you are not being talked 
into a change by your vendor, says Jay 
Botelho, director of product management 
at WildPackets (www.wildpackets.com). 
"The key signs you need an upgrade re- 
placement are that your hardware life cycle 
is reaching its end, and you're exceeding 
your port density on a somewhat regular 
basis," he says. 

Another option is going virtual. John Caughell, 
marketing manager at Argentstratus (www 
.argentstratus.com), notes that a highly vir- 
tualized off-premises shared server system 
can offer small businesses reduced admin- 
istrative costs. With little upfront investment, 
a business can have the same amount of 
computing resources delivered virtually, and 
securely, to the users. 

"Small businesses especially should seri- 
ously rethink their desire to invest in IT 
infrastructure," Caughell says. "Even though 
hardware costs are decreasing, software 
and management costs continue to grow at 
a tremendous pace." 



speeds and feeds of data center traffic 
that are sure to come your way — as well 
as being flexible enough to accommodate 
different deployment options. 

"It's critical that data center deploy- 
ments scale as they need to while also 
being easy to manage and administer," 
says Naveen Prabhu, product marketing 
manager at Riverbed Technology (www 
.riverbed.com). "Data center managers 
should look for WAN optimization solu- 
tions that intelligently load balance traffic 
and connections across multiple devices, 
that can scale WAN optimization needs 
as required with minimal downtime and 
that can be simply managed through a 
single interface." 
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A Look At OpenFlow 

Flow-Based Open Protocol Offers Network Scalability & Virtualization 



by Joseph Pasquini 

In our profusely interconnected world, 
networks have grown to become perva- 
sive, and likewise essential, elements of 
today's core infrastructure. Just as running 
water and reliable energy are often taken 
for granted in our homes and businesses, so 
too is network connectivity. When it works, 
everyone happily goes about their normal 
activities; when the proverbial "wire" is 
down, though, users suddenly care and an 
immediate solution is demanded. 

While this high degree of expectation 
seems reasonable on the surface, it also 
represents a significant barrier to research- 
ers seeking to push the envelope in the 



Key Points 



OpenFlow lets researchers and admin- 
istrators customize the networl< topology 
programmatlcally. 

Hosts on an OpenFlow network see the 
virtual topology rather than the underlying 
physical topology. 

OpenFlow builds on functionalities already 
present in many switches and routers. 



development of new networking technolo- 
gies. The temptation to leverage the enor- 
mous installed base of existing equipment 
and protocols as the ultimate laboratory for 
experimentation is immense. Nevertheless, 
administrators are understandingly reluc- 
tant to allow any sort of experimentation 
with production traffic, regardless of the 
rationale or potential long-term collective 
benefit. As a result, there have traditionally 
been few practical ways for researchers to 
confidently experiment with new network 
protocols in properly scaled environments. 

Additionally, administrators of large pro- 
duction environments have been equally 
hindered by the discrete litany of vendor- 
specific networking devices and their inher- 
ent lack of extensibility and customization. 

Having recognized these dilemmas, the 
networking community has been hard at 
work developing an open-source solution 
centering on programmable networks. Such 
solutions call for programmable switches 
and routers that, using virtualization, can 
slice the network into multiple isolated 
experimental segments extending from the 
backbone all the way to the wiring closet. 
The ability to programmatlcally customize 
the network topology provides researchers 
with their prerequisite sandbox and admin- 
istrators with the necessary tools to steer 
and manage vast network sprawl. 

OpenFlow is one such standard that has 
quickly begun to attract attention and gar- 
ner a degree of acceptance. 

An Open Concept 

OpenFlow is an open-source, open-stan- 
dards project borne of a six-year research 
collaboration between Stanford University 
and the University of California at Berkeley 
that gives users unprecedented ease of con- 
trol over the way their networks operate. 
As a kind of software-defined networking, 
or SDN, OpenFlow provides administrators 
and researchers alike with a standardized 
programmatic hook into routers and switch- 
es supporting the new protocol. Multiple 



switches, and even networks, can be virtu- 
ally connected together and managed regard- 
less of the underlying hardware or physical 
connections — complete with policies and 
traffic management — using OpenFlow. 

"Prior to [OpenFlow], we've simply 
never had a programmatic way to reach 
deep enough into enterprise-grade net- 
working devices to do what we need to 
do," explains Kyle Forster, vice president 
and co-founder of Big Switch Networks 
(www.bigswitch.com). 

As a result, many OpenFlow pioneers 
anticipate a surge in growth and accep- 
tance of the new protocol. "We see first- 
hand the opportunities for OpenFlow and 
SDN growing quickly, expanding beyond 
the research community we have already 
been supporting," says Tim Maass, direc- 
tor of marketing and sales for Macrotron 
Systems (www.macrotronsystems.com). 

A number of networking heavyweights, 
including Cisco and Juniper, have already 
joined forces with Microsoft, Google, 
Yahoo!, Verizon, Facebook, and Deutsche 
Telekom to promote the OpenHow concept. 
These industry players have collectively 
formed the Open Networking Foundation 
(www.opennetworkingfoundation.org) in 
order to better propagate the case for the 
new protocol. 

John Dickey, vice president of engi- 
neering at Talari Networks (www. talari 
.com), also sees OpenFlow establishing 
itself as a dominant data center player. 
"OpenFlow has enormous potential to 
reshape data center networks and architec- 
tures," Dickey says. 

A Straightforward Approach 

The basic principles behind OpenFlow 
are fairly easy to digest. Just about every 
modern Ethernet switch and router con- 
tains flow tables that are normally utilized 
to implement firewalls, QoS, NAT, or the 
gathering of metrics. While each vendor's 
flow table implementation is typically 
unique, OpenFlow makes use of a set of 
functions that these network devices can 
often commonly share. 

The data path of an OpenFlow-enabled 
device comprises one or more flow tables 
and a group table, which together perform 
packet lookups and forwarding actions, 
and a secure channel to an external con- 
troller, which handles management func- 
tions. Using the OpenFlow protocol, the 
controller can add, update, and delete flow 
entries, both reactively and proactively. 

OpenFlow-compliant devices are avail- 
able in two different variations: those that 
only process packets through the OpenFlow 
pipeline (OpenFlow-only) and those that 
support both OpenHow and normal Ethernet 
switching operations (OpenHow-hybrid). 

Each flow table in the switch contains 
a set of entries consisting of match fields, 
counters, and a set of instructions intended 
to be applied to appropriately matching 
packets. According to the OpenFlow stan- 
dard, hardware designers are free to imple- 
ment the tables in any way they see fit 
provided that the proper match and 
instruction semantics are preserved. 

The Road Ahead For OpenFlow 

According to Talari's Dickey, the Open- 
Flow protocol has great potential to serve 
as a powerful enabler of cloud computing. 



"As enterprises continue the server and 
service consolidation that public and pri- 
vate cloud computing enables, there is 
growing demand for a WAN access layer, 
which is scalable, reliable, and inexpen- 
sive," Dickey says. "OpenFlow should 
be a critical component to efficiently and 
cost-effectively scaling data center net- 
works for both public cloud and private 
cloud computing." 

Some industry experts, however, cau- 
tion that OpenFlow may be using up too 
much of the proverbial oxygen in the 
room. "I think focusing on OpenFlow 
draws attention away from the broader 
trend," says Martin Casado, co-found- 
er and CTO of Nicira Networks (www 
.nicira.com). "The broader trend is that, 
with a standardized, remote API to a 
switch (like, but certainly not limited 
to, OpenFlow), network functionality 
can be added through modern software 
design practices." 

Casado contends that there are two pri- 
mary implications that result from such 
a trend. "First, users (not just the vendors) 
can innovate within their own networks," 
Casado says. "Secondly, I would argue that 
building networks this way moves the state 
of the art from purely distributed protocol 
design to modem distributed system design." 
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The data path of an OpenFlow-enabled device 
comprises one or more flow tables, a group table, 
and a secure channel to an external controller. 



He continues, "I have no idea what will 
happen to OpenFlow itself. Perhaps it will 
be adopted as the industry standard; per- 
haps it will be supplanted by something 
better. I think it is currently the best can- 
didate for adoption, but it is early yet." EI 
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Data Center Building & Design 

What are your options when it comes to 
needing more data center space? And 
what are the most important issues to 
consider? We talked with some experts to 
answer those questions and more. 



iVIaxed Out: Your Options | 24 

■ Data centers across the country 
are running out of capacity. Why are 
so many data centers maxed out? 
In part, it's because the volume of 
enterprise 
^ ^ data 

contin- 
ues to 
grow at 
an exponen- 
tial rate. 





Your Next Data 
Center: New 
Construction Or 
Existing Facility? 1 26 

■ What 
makes more 
sense — finding 
an existing facil- 
ity or building a 
new one? What you need, when you 
need it, and what you can afford will all 
contribute to your decision. 



Know Your Building Needs | 27 

■ Even if your intentions are good 
when seeking a new data center 
building or land site location, it's 
easy to overlook key elements that 
could mean the differ- 
ence between 
an efficient, well 
running envi- 
ronment and 
an enduring 
nightmare. 




Overseeing A Data 
Center iVIove 1 28 

■ Overseeing the 
complexity of a data 
center move can feel 
overwhelming because 
there are so many moving 
parts, decisions, and last- 
minute changes that can crop 
up. But when taking on that role, data 
center managers don't need to do all the 
work — and indeed, they shouldn't. 



Maxed Out: Your Options 

If Your Data Center Is Running Out Of Space Or Power, These Strategies Can Help 



by Cynthia Harvey 

Data centers across the country are 

running out of capacity. According to a 
recent survey by the Uptime Institute, 36% 
of North American data centers will run out 
of space, power, cooling, or all the above 
this year or in 2012. 



Key Points 



More than a third of U.S. data centers will 
run out of space, power, and/or cooling 
capacity this year or next. 

Consolidation, virtualization, energy effi- 
ciency, outsourcing, and cloud computing 
initiatives can help enterprises avoid building 
or leasing additional data center facilities. 

If a data center has already pursued 
these other options and is still running out 
of capacity, it's time to start planning to 
acquire more space. 



Why are so many data centers maxed 
out? In part, it's because the volume 
of enterprise data continues to grow at an 
exponential rate. Market research firm 
Gartner recently reported that enter- 
prises ranked data growth as their 
biggest data center hardware infra- 
structure challenge. 

The challenges of data growth 
were exacerbated by the recent recession, 
which led many enterprises to postpone their 
expansion plans. Now that the economy 
seems to be on the rebound, many are trying 
to catch up by expanding their server fleets. 
As a result, they're running out of room and 
power in their existing facilities. 

The obvious solution for a data center 
that's nearly at capacity is to build or lease 
additional space, but many enterprises are 
hesitant to do so. Moving to a new facility 
can be complicated and costly, and it car- 
ries some risk of downtime and data loss. 
Instead, most enterprises first investigate 
their other options — consolidation and vir- 
tualization, energy efficiency initiatives, and 
cloud computing or outsourcing — before 
making the decision to move or expand. 

Consolidation & Virtualization 

When enterprises realize that they are 
running out of data center capacity, they 
often turn first to consolidation. In fact, in 
the Uptime Institute survey cited above, 
62% of the data centers that were running 
out of room planned to consolidate serv- 
ers. And according to Gartner, consolida- 
tion efforts often reduce the number of 
servers in a data center by 5 to 20%. 



Generally, a consolidation effort begins 
with an inventory of equipment. "Often 
there are obsolete, orphaned, or underutilized 
servers or equipment that can be consoli- 
dated or just tumed off and removed," notes 
Brett Femrite, sales manager at Rackmount 
Solutions (www .rackmountsolutions .net) . 
"This not only clears space, but removes 
those pieces of equipment from the power 
grid (and from cooling considerations)." 

Similarly, application audits can turn up 
redundant apps. When these duplications 
are reduced, companies often find that 
they can further reduce their hardware. 

Like consolidation, virtualizing workloads 
also helps companies reduce the size of their 
server fleets. In a virtualized envi- 
ronment, applications aren't tied 
to a specific physical server, which 
makes it possible to move workloads 
around and reduces the need for 
overprovisioning. 



and energy efficiency focus is becoming a 
more significant concem." 

Companies that want to reduce their ener- 
gy consumption have several options. They 
can invest in power monitoring and manage- 
ment software that can help them use power 
more wisely. They can also replace some 
of their older equipment. "Legacy hardware 
is usually power-hungry," notes Wilcox, 
"while the latest generation of server and 
storage technologies often consumes less 
power and new tools can manage power 
usage based on demand." 

Also, because cooling 
accounts for such a large 
percentage of data center 





"Virtualization 
is an excellent avenue to 
explore, as is moving to high- 
density server and storage hardware," 
says Eric Wilcox, engineering specialist 
for Dell's data center infrastructure team. 
"Both approaches can help IT managers 
reduce their data center footprint while 
lowering overall operating costs." 

Energy Efficiency Initiatives 

Although consolidation and virtualiza- 
tion can help companies reduce their need 
for physical space, they don't address data 
center power concerns. "In an age when IT 
is adopting server/storage consolidation and 
virtuaHzation strategies to scale resources as 
necessary, today's average data center faces 
a shortage of power — and by connection, 
cooling — ^before a shortage of space," Wilcox 
says. "As a result, power management 




power con- 
sumption, "evaluat- 
ing cooling and airflow 
within the data center can make a huge dif- 
ference in managing both power consump- 
tion and space limitations," Femrite says. 
Cooling techniques such as hot and cold 
aisles and using outside air instead of air- 
conditioning whenever possible can further 
reduce power consumption. 

Femrite adds that data center managers 
should also pay attention to the details 
that can impact power requirements. 
"Misaligned racks, cable sprawl, improper 
filler panel placement, rack overcrowding, 
and air leaks can all contribute to ineffi- 
cient cooling," he says. 

Cloud Computing & Outsourcing 

Data centers can also deal with capac- 
ity shortages by letting third parties handle 



some applications. They can do this through 
a traditional IT outsourcing arrangement or, 
as is becoming increasingly common, by 
using cloud computing services. 

Although not every application is suitable 
for the cloud, many enterprises have found 
that moving some applications to the cloud 
reduces their need for floor space and elec- 
tricity. "The really great thing about cloud 
computing is that it's not an all-or-nothing 
endeavor," Femrite says. "Be selective. Try 
moving one or two applications at a time to 
the cloud where you stand to gain the most 
cost savings and strategic advantage." 

Wilcox adds that the right cloud comput- 
ing strategy for your company "depends 
on considerations such as your current 
infrastructure, the demand on your current 
resources, and the sensitivity of your data." 

Build Or Lease New Facilities 

Even after trying all of these other tech- 
niques, some data centers will find that 
they're stiU running out of room. "If the 
data center has already reaped the ben- 
efits of virtualization (server consolidation 
and deployment of virtual machines 
over physical), and it's stiU 
pushing capacity, 
it's probably 
time to look 
at expansion 
or relocation," 
Femrite says. 
Many com- 
panies have, 
in fact, reached the 
point where additional 
facilities are a necessity. In 
a recent white paper, data center 
provider Digital Realty Trust reported that 
85% of enterprises surveyed said they would 
expand their data centers in 201 1, and 84% 
planned to continue expanding in 2012. 
If your company has decided to pur- 
sue expansion, you'll next have to decide 
whether to buUd your own facility or lease 
space, a topic this issue of Processor covers in 
"Your Next Data Center: New Construction 
Or Existing Facility?" on page 26. 



Expansion Plans 

According to a recent survey conducted by 
Digital Realty Trust, 85% of enterprises "prob- 
ably" or "definitely" plan to expand their data 
center capacities this year. 





Source: Digital Realty Trust, 
"What is Driving the U.S. Market? 201 1 " 
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I Microsoft Loses Patent Battle 

The U.S. Supreme Court upheld a $290 
million award against Microsoft in a patent 
dispute with Canadian software company 
141. The case began in 2007 when 141 sued 
Microsoft for infringing on its patented doc- 
ument editing technology. In its appeal to 
the Supreme Court, Microsoft said that i4i's 
patent was invalidly granted and argued 
that a lower court had required Microsoft 
to show clear and convincing evidence of 
this when it should have only been required 
to show a preponderance of the evidence. 
The Supreme Court rejected Microsoft's 
appeal and said that a declaration that a 
patent is invalid should be held to the high- 
er standard of evidence. 




I Visual Communications 
Consortium Formed 

There's a new industry consortium, and 
the goal is to improve global visual com- 
munications by using an open standard to 
link service provider networks. The OVCC 
(Open Visual Communications Consortium) 
is headed by Polycom, which wants to 
establish a standards-based, multi-network, 
multi-vendor exchange between members 
so that everyone can deliver a consistent 
business-to-business experience. Overall 
goals include the ability to provide intercom- 
pany connectivity that improves unified com- 
munications sen/ices, contribute to fair and 
equitable standards and performance criteria, 
and preserve investment in multiple technolo- 
gies. The OVCC plans to support H.323, SIP, 
H.264, Cisco, Microsoft, BroadSoft, and IBM 
solutions in mixed interactions. 

I Few Patient Benefits, 
Says Health IT Study 

In spite of advances in IT — and in health- 
related IT in particular — patients themselves 
are seeing little in the way of direct benefits 
from the technology. Researchers from Weill 
Cornell Medical College, Columbia University 
Stroud Center, and the New York State 
Psychiatric Institute examined the effect of 
health IT in nursing homes and determined 
that there was "no measurable improvement 
in resident condition as a result of the HIT 
intervention." Researchers also warned that 
there might in fact be negative effects, noting 
an increase in observed disruptive behaviors 
that may or may not have been related to the 
implementation of health-related IT. 

I Department Of Commerce Calls 
For New Cybersecurity Standards 

Noting that cyberattacks on Internet com- 
merce, vital business sectors, and govern- 
ment agencies have grown exponentially, 
a report from the U.S. Department of Com- 
merce says that the agency should partner 
with Internet businesses and organizations 
to establish new voluntary codes of conduct 
aimed at protecting against cyberattacks. 
The report recommends unifying existing 
disparate technical standards and suggests 
that the agency assist in the development of 
such codes. In response to private industry 
calls for the government to steer clear of 
the development of security tools, the report 
nonetheless posits a government role in 
promoting best practices as they relate to 
Internet-related security. 
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Your Next Data Center 
New Construction 
Or Existing Facility? 



Consider Costs, Needs & Speed When Deciding Which Route To Take 




by Julie 
Knudson 

Your data center 

is out of space and you 
need to do something. What 
makes more sense — finding an 
existing facility or building a new 
one? What you need, when you need 
it, and what you can afford wiU all con- 
tribute to your decision. With your list 
of need-to-haves in hand, it's time to 
partner up with your facilities, engineer- 
ing, and accounting teams and figure out 
if it makes more sense to remodel an 
existing building or bmld one from the 
ground up. 

Capital Costs 

Your organization's financial posi- 
tion will play perhaps the biggest role in 
determining if a new data center is built 
or if your team moves into an exist- 
ing facility. A lack of available 
funds in the near term 
will likely steer 
you away from 
new construction. 
"Today, most 
companies are 
shifting from a capital 
expenditure to operational expendi- 
ture model in addressing IT infrastructure," 
says Dr. Mickey S. Zandi, managing princi- 
pal, consulting services, SunGard AvaUabiUty 
Services (www.sungardas.com). "So unless 
there is a unique set of requirements specific 
to an organization's business or industry, it 
is difficult to justify building a new data cen- 
ter at this time." 

However, you shouldn't assume that ret- 
rofitting an existing building will be signifi- 
cantly cheaper. Depending on the state of 
the facility's infrastructure, you might be 
looking at a project that's on par with new 
construction. "When you look at an existing 
facility, you have ceiling heights, you have 
power issues, [and] you also need to pre-plan 
the facility — ^how the generators are going to 
work and these types of things, and by the 
time you modify many existing buildings, it 
costs as much as building a new data center," 
says Paul E. Schlattman, vice president of 
mission-critical facilities at Environmental 



Systems Design (www.esdesign.com). 
Knowing your needs and what's required to 
meet them will help determine the less expen- 
sive route in terms of upfront dollars. 

Operating Costs 

As is often the case, how you man- 
age today's capital expenses will impact 
tomorrow's operating costs. If construc- 
tion prices are pushing you toward an 
existing facility, it's time to evaluate if 
you'll have more money later to pay the 
operating expenses on a building that's 
older and may need repairs or significant 
retrofits as your needs evolve. 

KeUy Decker, president of Primary Inte- 
gration (www.primaryintegration.com), 
encourages enterprises to ask about utility 
capabilities specifically, as 
they're 
often 
the most 
onerous 
to man- 
age. Decker 
suggests a 
few questions 
you should ask: 
How much flex- 
ibility do we have 
relative to add- 
ing power to the 
site? How time- 
consuming is 
that, and what are 
the expenses if we 
have to do it?" At some point. Decker says, 
upgrades to an existing site may no longer be 
viable expenditures, and then you're back to 
square one. 

New construction also brings its share 
of ongoing expenses, and the decisions 
you make (and the money you spend) now 
on engineering and design will dictate 
operating costs down the road. If you can 
only afford a bare-bones structure, is a 
new building really going to cost you less 
in the long run? When ongoing expenses 
become too much to handle, terminating 
the lease on an existing building will be 
considerably less expensive than trying to 
find someone to buy the one you built. 

Take A Pliased Approacli 

To minimize initial costs, consider if 
either the construction of a new build- 
ing or the outfitting of an existing one 




Key Points 



Weigh capital and operating costs to 
see what you can realistically manage 
now and later. 

Careful engineering and design are critical 
to developing accurate costs for both new 
construction and retrofits. 

How quickly you need a new data center 
may play a big role in your decision. 



could be broken down into phases. "When 
considering an existing building, compa- 
nies that take a 'smart retrofit' approach 
make the strongest business case," Zandi 
says. "In this approach, a company only 
retrofits certain zones in the data center — 
not the entire facility — to manage costs." 

Though it may not net the same level of 
upfront cost savings, this approach can also 
work in new construction. Once the shell is 
up, it may be feasible — and less expensive 
overall — to build out only the portion of the 
structure that you need to meet your near- 
term needs. Staging build-outs in this way 
reduces initial costs while giving you the abil- 
ity to grow later. It might also be possible to 
lease out the undeveloped space for ware- 
house or similar use by other tenants, assum- 
ing you're able to manage security issues in a 
way that safeguards your operations. 

Consider Tlie Time Factor 

How quickly do you need a new data cen- 
ter? In general, remodeling an existing build- 
ing is faster than building one from scratch. 
"Anytime you're going to build a new site, 
you're going to have to spend more time, so 
speed to market is going to be better if you 
find a facility that can accommodate you," 
Decker says. Other considerations, such as 
the location of generators and maximizing 
energy efficiency, "are incidental as it relates 
to the speed to market of the facility." 

In some cases, though, retrofitting can have 
a significantly longer duration than putting 
up a new building. Obtaining permits, espe- 
cially in change-of-use scenarios or when 
environmental impacts must be considered, 
can take months or even years. And if you 
aren't completely sure about every last detail 
of your existing structure — utility limitations, 
structural capabilities, site concerns — you 
could run into a project- stopping glitch that 
isn't quickly resolved. 



A Third Option: Colocation 



Another option exists for companies that aren't finding what they need — or can afford — in either new construction or by remodeling an existing facil- 
ity. "The third alternative, which is really becoming big even with enterprise users, is to go to a colocation facility," says Paul E. Schlattman, vice 
president of mission-critical facilities at Environmental Systems Design (www.esdglobal.com). He says that upfront capital expenditures to build or 
retrofit a data center are increasingly prohibitive, prompting organizations to look for new solutions. 

Dr. Mickey S. Zandi, managing principal, consulting services, SunGard Availability Services (www.sungardas.com), agrees. "We are seeing companies 
include a third option in data center decision making. Increasingly, organizations are deciding to get out of the IT infrastructure business entirely. They are 
going with sen/ice providers and tapping a mix of colocation, managed hosting, and cloud computing to address their business computing needs." 
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Know Your 
Building Needs 

What To Look For When Seeking A New 
Data Center Building Or Land Site 



by Christian Perry 

Just as you wouldn't throw a fine-tuned 
automobile engine into an old jalopy, orga- 
nizations aren't likely to move new or exist- 
ing IT architecture into a decrepit, poorly 
equipped building. But even if your inten- 
tions are good when seeking a new data cen- 
ter building or land site location, it's easy to 
overlook key elements that could mean the 
difference between an efficient, well-running 
environment and an enduring nightmare. 
However, by covering all the primary bases 
in your search, you can ensure your new 
space will be the right space. 

"In my experience, evaluating data center 
locations is a multi-disciplinary corporate 
effort," says Brian Greenberg, founder of 
General System Dynamics (www 
.gsysd.com). "It is impor- 
tant to include input from 
IT, corporate real estate, 
the system owners, and other 
key constituents. The selec- 
tion process should consider a 
series of factors." 

Know The Area 

Selecting 



structures, grid configuration, power avail- 
ability, and location, he says. 

Power, in particular, has become a top-Une 
concern for organizations looking to build 
new data centers. Greenberg recommends 
ensuring good access to power and telecom- 
munications infrastructure, which comes from 
good physical access to disparate power and 
telecommunications paths so there is physical 
redundancy in both power and telecom capa- 
bilities. He also recommends that organiza- 
tions seek inexpensive power sources. 

"Power consumption is one of the larg- 
est operating expenses of a data center," 
Greenberg says. "Different regions of 
the country will have 
significantly differ- 
it pricing, de 



Key Points 



Experts recommend avoiding areas prone 
to natural disasters wlien clioosing a site 
for a new data center or land acquisition. 



Researcliing the local power and telecom- 
munications infrastructure and availability 
is key to ensure these resources will meet 
your needs. 

Never assume that the physical access 
and capacity of a new data center will 
accommodate anything you need now or 
might need in the future. 




a location 
for a new 
data cen- 
ter or land 
site isn't 
just about 
proximity 
to enterprise 
headquar- 
ters. Experts 
r e c o m - 
mend avoid- 
ing natural 
disaster areas, because if 
you decide to buy or build in 
a risky location, you're simply inviting 
potential trouble. For example, Greenberg 
helped evaluate sites for a company based 
in the Seattle area that required a remote 
location for data storage services. 

"We found several sites that fit most of 
the requirements, but none were perfect," 
he explains. "One of the requirements was 
to have the facility outside of the Seattle- 
area fault zones by going east of the Cascade 
mountain range but being within a few hours 
of Seattle, particularly to address the event of 
an earthquake or volcano eruption. The one 
site that we were able to identify had a very 
low impact effect of an earthquake and a 
moderately low effect of a volcano." 

However, he adds that there were prob- 
lems finding anyone to staff this facility 
because it was so remote, so a new site was 
found that had an acceptable risk tolerance 
without sacrificing adequate staffing. Other 
issues also affect data center site selection, 
including total cost of ownership, the robust- 
ness of the regional electrical center grid, 
time to market, and latency issues, says Ham 
Southworth, a corporate managing director 
with Studley (www.studley.com). As such, 
most companies focus on big-ticket items 
such as power costs, incentive packages, tax 



as coal burning, 
nuclear, or hydro- 
electric. Additionally, some companies 
choose to have their data centers in cooler 
climates to take advantage of the naturally 
cool air to help reduce energy costs." 

Consider Physical Access 

Plans for a new data center are never com- 
plete without accommodations for physi- 
cal access and current and future capacity 
requirements. For example, Greenberg says 
there must be adequate ability to bring in 
large industrial equipment easily via loading 
docks and freight elevators to avoid cutting 
holes in walls to bring in equipment — even 
via helicopter to the top floors. Floor loads 
also must be able to accommodate increas- 
ingly dense computer equipment. 

"Some time ago, I was able to evaluate a 
new high-density data storage array that we 
were very excited about," Greenberg relates. 

Don't Overlook Taxes 

A location might have the perfect mix of resources for your new data center, but it's easy to overlook 
sales taxes and personal property taxes when considering locations, according to Ham Southworth, a 
corporate managing director with Studley (www.studley.com). These factors can play a huge role in a 
data center's total cost of ownership and should always be included in the planning. 

"A $50 million data center typically has $100 million in servers, which must be replaced every 
three to four years," Southworth says. "Every 1% of sales tax means $1 million more in costs 
every three to four years. Given the value of this equipment, property tax millage rates and com- 
puter equipment depreciation schedules also have a material impact on costs." 



"We had a very modem and fairly state-of- 
the-art data center in our downtown office 
building, but once the array arrived, our 
facilities manager wouldn't allow us to bring 
it in the data center because it exceeded the 
floor load capacity." 

Along with floor load requirements, orga- 
nizations should also keep space require- 
ments in mind when considering a new data 
center. Greenberg says that some customers 
need only part of a rack, while others will 
need an entire rack or a cage space, while 
still others will need entire floors for expan- 
sion and growth. To help properly gauge 
your needs and anticipate growth, Greenberg 
recommends that IT, corporate real estate, 
and human resources work closely together 
to establish the requirements. 

Know Your Business 

According to Greenberg, an organiza- 
tion needs to first know its business before 
considering a new data center or land site 
location. At the beginning, it's wise to team 
with the disaster recovery coordinator, 
who should already have a business impact 
analysis completed that details the require- 
ments of the availability for systems that 
help drive the business. He notes that these 
requirements will set forth the minimum 
availability requirements for choosing the 
best data center site and establishing the 
baseline architecture moving forward. Also, 
it' s best to seek the input of all system own- 
ers, including server administrators, stor- 
age and backup administrators, networking 
teams, and operations staff. 

"Keeping them actively involved will make 
transitions to — and within — the data center 
and management of your computer resources 
efficient and provides a sense of involvement 
within the organization," Greenberg says. 
"You must [also] keep the legal department 
informed of your plans. There may be legal 
issues with international law, privacy, and 
security by housing data in other countries or 
even other states within the United States." 

Finally, Southworth advises creating a 
checklist that includes issues such as the 
presence/absence of natural and manmade 
hazards; the availability of incentives, 
tax credits, or other financial benefits; the 
proximity to labor markets and transpor- 
tation links; and site scalability. "[The] 
checklist thus becomes an invaluable tool 
that allows our clients to compare various 
sites using apples-to-apples criteria select- 
ed and weighted by them," he says, ui 



Ovum Survey 
Reveals Cloud 
Uncertainty Among 
Government ClOs 

Although cloud computing is being received 
positively by more and more enterprises, 
there is still a pocket of ClOs in the govern- 
ment sector that don't necessarily believe 
cloud-based data centers will save money 
In the long run. In fact, according to a 
recent report released by research firm 
Ovum, 46% of U.S. government IT offi- 
cials don't think moving to cloud comput- 
ing will save them enough money to be 
worth the investment. 




'The move to shared services does involve 
upheaval and invariably means changing 
software applications, which in turn can 
require system and data migration and all 
the complexity this entails," said Jessica 
Hawkins, an analyst at Ovum and author 
of the report, in a release from the firm. 
"IVIany agencies have the perception that 
there is not enough money to be saved to 
make this worthwhile." 

Behind The Reluctance 

The report, titled "Cloud Computing in the 
U.S. Federal Government," surveyed a sam- 
pling of ClOs and found that a number of 
cloud concerns still persist In data centers. 
Chief among them — listed by 68% of respon- 
dents — is the fear of giving up control over 
business functions by hosting processes in 
someone else's data center. Another major 
stumbling block is ClOs' loyalty to their own 
work and existing systems. 

"Changing the dynamics of sen/ice delivery is 
an emotive issue for public sector bodies and 
can cause them to fear that they are losing con- 
trol of their key business operations," Hawkins 
said. 'This is compounded by the prospect of 
job losses and the legal complexity of transfer- 
ring staff to a shared sen/ices model." 

The ClOs' reluctance to move to the cloud 
stands in contradiction with recommendations 
from U.S. CIO VIvek Kundra (who, incidental- 
ly, announced late last month that he will be 
leaving his CIO position to take a fellowship 
at Harvard University). Kundra testified before 
the Senate Committee on Homeland Security 
and Government Affairs that he believes a 
government-wide move to cloud computing 
would save taxpayers about $5 billion per 
year in procurement savings and gains from 
better efficiency. 

by Leah Houchin 
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I Disk Storage Sales Surge 

IDC reports that disk storage systems 
revenue climbed to $5.6 billion, up 13.2% 
compared to this time last year. According 
to the most recent Worldwide Quarterly 
Disk Storage Systems Tracker, disk storage 
manufacturers shipped 4,956 petabytes of 
capacity during the first quarter, which is a 
46.3% increase compared to 2010. IDC's 
analysts point to a recovering economy and 
higher demand for digitized media that previ- 
ously only existed on tape and other media. 
IDC cites a dramatic increase in next-gen- 
eration fixed digital content, such as videos 
and images. The storage systems seeing the 
biggest growth include midrange disk stor- 
age products such as scale-out architecture, 
file storage, and capacity optimizing features 
such as data deduplication. 




I Security Spending Falling 

Spending on security has decreased in half 
of businesses recently surveyed by com- 
pliance management vendor nCircle. The 
study of more than 550 information security 
professionals found that 18% of businesses 
also report they cut IT compliance-related 
spending. Even worse, 30% of the security 
professionals surveyed indicate their com- 
panies are not adequately enforcing security 
policies, and 44% don't believe their com- 
panies are effectively measuring security 
risk or regulatory compliance effectiveness. 
Of the various job concerns of management 
professionals, respondents say that reducing 
network and information security risks is last 
on their list of priorities. 

I Ericsson To Buy 
New Jersey Company 

Telcordia of Piscataway, N.J., is soon to 
become part of Swedish telecommunica- 
tions giant Ericsson. Telcordia is known for 
its operations support systems and business 
support systems communications software 
and services for mobile, broadband, and 
enterprise applications. Telcordia employs 
about 2,600 workers, and it earned revenue 
of $739 million over the past fiscal year. The 
$1.15 billion cash transaction is expected to 
close by the end of the year and take effect in 
the first quarter of 2012. 

I IDC Lowers PC Sales Forecast 

Research firm IDC slashed its predictions for 
sales in the PC market for this year by almost 
3%, lowering its original 7.1% growth predic- 
tion to 4.2%. A number of factors contributed 
to the change, including weak first-quarter 
PC sales; growing interest in alternative 
platforms, such as tablets and smartphones; 
market saturation; and the ongoing economic 
downturn. Despite the reserved outlook for 
this year, however, IDC predicts that the 
combination of new software and features 
and deep discounts from vendors will lead 
the market to rebound in 201 2, with growth of 
10 to 11% from 2012 to 2015. 

I Samsung To Dethrone Nokia 
As World's Top Smartphone Seller 

By year's end, Nokia is set to lose its spot as 
the world's top smartphone seller, a position it 
has held since 1996, according to analyst firm 
Nomura. In fact, the firm expects Nokia to 
fall to third position behind Samsung, which 
Nomura anticipates will grab the No.1 spot 
next quarter, and Apple. In a research note, 
Nomura forecasts that HTC will almost match 
Nokia during 2012, further emphasizing the 
shift in power to Asia. 



FEATURE PACKAGE 



Overseeing A 
Data Center Move 



When Executing A Move, An IT Manager Should Play 
The Part Of Coach, Not Quarterback 



by Elizabeth Millard 

Overseeing the complexity of a 

data center move can feel overwhelming 
because there are so many moving parts, 
decisions, and last-minute changes that 
can crop up. But when taking on that role, 
data center managers don't need to do all 
the work — and indeed, they shouldn't, 
believes Peter Sacco, president of PTS 
Data Center Solutions (www.ptsdcs.com). 



Key Points 



An IT manager should play the part of a 
coach for a move by finding resources, 
calling the plays, and making sure every- 
thing is coming together properly. 

Although a manager won't be involved in 
every aspect of a move, he should make 
sure that IT's voice is heard throughout 
the process. 

Insisting on a second engineer who han- 
dles only the data center can be helpful 
for avoiding problems in the future. 



"If you had a major plumbing issue at your 
house, could you fix it? Sure, probably," he 
says. "But you don't have the right tools [or] 
the right expertise, and you'd need to get 
the information out of a book, I'm guessing. 
Instead, you should just hire the expert and 
have it done correctly. The same goes for all 
the aspects of a data center move." 

Outside contractors have areas of exper- 
tise, he adds, and those often can't be rep- 
licated by an IT department. Aspects of a 
move, such as data center engineering and 
cabling implementation, are complicated 
endeavors that can be handed off to those 
who do that work for a living. 

In general, a manager should see his role 
as that of a coach who marshals resources, 
organizes the players, and makes sure they're 
running the play properly. For a worry-free 
move, here are the areas where a manager 
should be sure to step in and put those coach- 
ing skiUs to good use. 

Site Selection 

There are numerous factors that go into 
choosing a site and/or an existing facility for 
a new data center location. Although some 
real estate agents and company representa- 
tives will be aware of data center issues, it's 
imperative that IT managers make sure to be 
in on the discussions about where to move 
and possible new facilities. 

"Often, a space will get picked because 
it's a good location in relation to where staff 
members live," Sacco says. "That's impor- 
tant, but it's likely that there will be a choice 
between multiple offices in a given location. 
It's up to the data center manager to make 
sure the place will work." 

For example, the manager should double- 
check power availability in the location and 
ensure that cabling and equipment can fit 
properly in the new space. Consultants can 




be helpful with issues like 
this, but it's really up 
to the manager to 
make sure that the 
new space is suit- 
able. (For more 
information on 
data center site 
selection, turn 
to "Know Your 
Building Needs" 
on page 27.) 

Selecting 
An Engineer 

In the selection 
process for design 
and build profes 
sionals, Sacco recom- 
mends that IT man- 
agers ask for a second 
engineer to be part of the 
team. This particular engi 
neer should have experi- 
ence in data center building, 
because it's likely that issues 
win crop up with older build- 
ings, power and cooling 
issues, cabling concems, 
and space requirements. 

"There's going to 
be the person who can 
build a pretty conference 
room with mahogany tables, and then 
there's going to be the person who will 
build a great data center," Sacco says 
"These won't be the same person." 

Identifying Vendors 
For Implementation 

There will be many players when it 
comes to implementing the move, and it's 
best for a data center manager to do the 
work of identifying the right vendors and 
making sure they can work well together. 

According to Romir Bosu, president of 
IT consulting firm Compushare, the main 
vendors that will need to be coordinated 



Steps Toward 
The Move 

According to PTS Data Center Solutions 
(www.ptsdcs.com), these are the steps 
involved in a data center move: 

• Determining needs, including scalability 

• Surveying properties and/or 
existing buildings 

• Assessing whether properties and facili- 
ties meet current and future needs 

• Planning the move 

• Designing and engineering the new facility 

• Procurement of new equipment 

• Construction of facility 

• Physical move and implementation 
of systems 

• Monitoring and management of 
systems in new facility 

• Operation and maintenance in new building 



include 
cabling 
companies, 
HVAC firms, 
security system 
vendors, tele- 
communications 
professionals, and 
system integrators. 
Particularly impor- 
tant, he notes, is to 
make sure that vendors 
can test the network to 
ensure that the applica- 
tions and operations run 
the same way — or even 
better, if improvements are 
part of the plan. He empha- 
sizes that there should be a 
retest, then a test again, and 
then even more testing. Choosing vendors 
who are willing to do multiple tests is cru- 
cial, Bosu believes. 

Stepping Back When Needed 

Experts will take on a variety of roles in 
a data center move: site selection, engineer- 
ing, cabhng, equipment hauling, and system 
testing. The best strategy an IT manager can 
use is to choose the right people, make sure 
schedules are being met, and then step back 
and let the professionals do their jobs. 

"The data center manager won't be the 
person who can do everything — that's why 
experts are hired," Sacco says. "However, 
the manager will be the one who coordi- 
nates and makes sure it all gets done. Let 
the contractor do his or her job, but ensure 
that the job is done properly." 

In coordinating all the moving pieces, an 
IT manager should be quick to respond to 
questions, always available for communica- 
tion, eager to get approval on budget items 
from higher-ups, and willing to mediate 
and dole out some tough love at times. 

"When I'm coaching, I'm nice and then 
I yell a little, then I finish with another nice 
thing," Sacco says. "It's the same in a data 
center move. You can't alienate anyone 
because then you won't get anything done. 
So you have to be willing to create that 
coach persona, where you're tough but fair, 
and get your team motivated." 
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SIX QUICK TIPS 



Monitor & Optimize 
Your Information 
Security Equipment 

Analyze Security Logs & Tune Your IPS To Keep The Network Secure 



by Bill Hayes 

While succeeding generations of 

information security equipment protecting 
your organization liave grown in complexity 
and ability, these vital devices still must be 
monitored and maintained by skilled tech- 
nicians. Here are a few tips from security 
vendors on how to optimize your security 
equipment cind better monitor its logs. 

Continually Optimize 

Your Intrusion Prevention Systems 

According to Steve Piper, senior direc- 
tor of products for Sourcefire (www 
.sourcefire.com), an organization can in- 
crease protection, reduce risk, and opti- 
mize resources by following one simple 
tip: tuning its IPS. "Unfortunately, due to 
resource constraints, most IPS solutions 
are rarely tuned or tuned once with a 'set 
it and forget it' approach, which doesn't 
work in today's dynamically changing 
network and threat environment," he says. 

"Automation is the key to making IPS 
tuning a reality," Piper says. "Minimizing 
the need for human intervention reduces 
costs while mitigating risks, increasing 
security, and optimizing the use of highly 
trained security IT resources." 

'To stay in tune, organizations should look 
for IPS solutions that automatically maintain 
an inventory of network assets in real time 
and automatically recommend rales based on 
the specific environment," he adds. 

Match Business Objectives 

Chandra Sekar, senior manager of prod- 
uct marketing for McAfee, says that in 
order for small or midsized organizations 
to rebound, remain competitive, or thrive, 
they need to build out areas of their busi- 
ness. Sekar says SMBs are gaining strength 
by enabling a mobile workforce, leveraging 



BONUS TIPS 



■ Present varying levels of 
incident data. Security infor- 
mation can be ovenwhelming. 
"It is helpful to provide varying 
views depending on audi- 
ence," says Dave Stuart, senior 
product marketing manager for 
Managed Security Services at 
Symantec (www.symantec 
.com). "A manager or executive 
may only wish to see a day's 
summary or trend graph, while 
an analyst may require access 



to every incident and support- 
ing logs. The ability to drill down 
on information within a com- 
mon portal is ideal. Also, it is 
nice to be able to partition the 
data on sort of a 'need-to-know' 
basis, with viewing privileges 
matched to the organizational 
hierarchy of the user." 

■ improve firewall perfor- 
mance. According to Peter 
Lunk, director of product 



marketing for Juniper Net- 
works (www.juniper.net), 
firewall performance is 
dependent on many factors. 

■ "Be sure to optimize 
the security features such 
as number of routes, pro- 
tocols, IPS, policies, etc., 
to match the scale require- 
ments for your deployment," 
Lunk says. 



cloud delivery options, or creating new 
markets using Web 2.0 applications. 

"For each of those business enablers, IT has 
to ensure the right processes and policies are 
backed up by the right security infrastracture 
and the right training and engagement with their 
staff, partners, and customers," Sekar says. 

Sekar recommends that midsized organiza- 
tions insist on getting real-time threat intel- 
ligence to help stay ahead of dangers. They 
should also look for vendors that streamline 
the process of security management to help 
reduce the time spent on manual processes. 
Enterprises should also develop intemal poli- 
cies and approaches that ensure each threat 
vector is covered in some way. Finally, they 
should look for multilayered security solu- 
tions — ^for example, those that combine anti- 
vims protection with data encryption — so that 
they do not have to solve each security issue 
with a standalone product. 

Optimize Performance 
Through Better Monitoring 

Dave Stuart, senior product marketing 
manager for Managed Security Services at 



Best Tip: 

Base Your Incident Ranking 
On Threat Severity 

According to Dave Stuart, senior product marketing manager 
for IVIanaged Security Services at Symantec (www.symantec 
.com), incidents should be based on the level of harm an incident 
could cause. 

"We use a four-tier incident ranking system based on the severity 
of the threat," Stuart says. "In addition, we allow the customer to 
append asset details from their own environment that provide further 
context (such as asset value, organization, system function, and 
compliance restrictions) that can then be used to determine the rel- 
evance of a detected security incident to the customer," Stuart says. 

"With this relevance, the customer can determine the level of pri- 
ority and notification they desire," he says. "In that way, only the 
most critical and relevant events receive immediate attention so 
security staff focuses on what matters most." 



Most Practical Tip: 

Use Compreliensive 
Log Analysis 

Stuart says you can show a return on 
investment by correlating your security 
equipment's log files. "Again, the value is 
not just in the protection any single device 
offers, but also in how it informs the whole 
of your security system," Stuart says. 

According to Stuart, a more complete picture 
of security events can be gained through 
analyzing logs from all sources. He says this 
results in better protection and greater confi- 
dence in your security equipment by discover- 
ing more incidents. "Having a comprehensive, 
organization-wide monitoring approach that 
doesn't break the security budget is key to 
ROI demonstration," Stuart says. 



Symantec (www.symantec.com), recom- 
mends improved device monitoring and 
correlation. "For effectiveness against varied 
and ever-evolving threats," he says, "you 
need defense in depth and therefore should 
have protections/monitoring in place at 
all levels within your networks: at gate- 
ways/firewalls, intrusion detection within 
networks, hosts/servers, endpoints, and 
common infection vectors such as Web 
and email." 

Stuart continues, "We find that aggre- 
gating logs from and cross-correlating 
events from all of these type devices yields 
increased incident detection, especially for 
newly emerging threats that may evade 
mono- or traditional detection techniques." 

Make Best Use Of All Security Logs 

"We advocate that all logs have value," 
Stuart says, "as they may provide insight 
into the nature of an exploit or early warn- 
ing to prevent attacks." 

For instance, by monitoring and profiling 
traffic levels through gateway devices (such 
as a firewall), one can detect anomalous traf- 
fic in the event an inter- 
nal host becomes compro- 
mised (e.g. a mail server 
that gets tumed into a zom- 
bie spam engine). "The 
traffic otherwise is nor- 
mal SMTP (expected from 
a mail server) traffic," 
Stuart explains. 

"Likewise, connection 
attempts to sites suspect- 
ed or known to host mal- 
code may provide early 
warning of pending com- 
promise and policies can 
be put in place to block 
access or further protect 
against suspect down- 
loaded files," Stuart says. 
"Without the full logs 
from these type devices, 
you may be blind to this 
activity and only know 
something is wrong after 
the damage is done." 



Study Shows Health IT 
Boosts Bottom Line 

IVIedical care facilities that utilize health IT 
are benefitting in both awards and profit- 
ability, according to a study by Fitch Ratings. 
The "Enhanced Accountability and Financial 
Performance" report found that 83% of tech- 
nology hospitals were given an A- rating 
or higher. Comparatively, only 67% of the 
hospitals without health IT were rated at A- or 
higher. About a third of technology hospitals 
were rated in the AA (the highest level) cat- 
egory, while only 24% of the control group 
was at the AA level. 

Jim LeBuhn, senior director at Fitch, says, 
"The study confirmed what we expected to 
see, in that the investment in IT is highly 
correlated to better financial performance 
and efficiency in hospitals." In terms of 
revenue, the average total for technol- 
ogy hospitals was 46% larger than the 
non-health IT hospitals. Fitch Ratings 
also notes that technology hospitals' aver- 
age unrestricted cash and investments 
were 30% greater than the control group. 
In conducting the study. Fitch Ratings 
examined the admissions history of the 
hospitals between the years 2005 and 
2009. At technology hospitals, admissions 
increased by an average of 4.7% per year, 
while admissions at the control group 
dropped by an average of 1 .4% per year. 
Similarly, outpatient surgery at technology 
hospitals increased 2.5% per year. 




Advanced Information Technology 

Adam Kates, director at Fitch Ratings, says, 
"There's been a lot of qualitative data on the 
importance of advanced information technol- 
ogy with hospitals, but what we hadn't seen 
was a study that quantified the financial 
impact on hospitals." Fitch analyzed the utili- 
zation trends and found that technology hos- 
pitals grew at 1 3.2% in net patient revenue 
between 2005 and 2009. The average hos- 
pital, on the other hand, had a 7.5% annual 
growth rate. "Because annual growth for hos- 
pitals with IT was greater than those without, 
we can infer that those with advanced tech- 
nology were able to control their costs better," 
Kates says. 

Because cost reduction is one of the 
big goals with healthcare reform. Fitch 
analyzed how well technology hospitals 
performed. Those with advanced informa- 
tion systems had a net income growth of 
1 .3% per year, while hospitals without 
health IT grew by only 0.2% per year. Fitch 
indicated that both operating margins and 
cash flow grew at faster rates within the 
technology hospitals, and the average 
hospital actually had a negative operating 
margin and cash flow between 2005 and 
2009. The bottom line, LeBuhn says, is 
that healthcare COOs and ClOs need to 
figure out a way to work advanced technol- 
ogy into the infrastructure if they haven't 
already done so. 

by Nathan Lake 
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I Spearphishing Attacks 
Continue To Increase 

Recent attacks on Google's Gmail ser- 
vice, which resulted in the compromise of 
U.S. government email accounts as well 
as other predominant targets in Asian 
countries, are examples of spearphishing 
attacks, which are becoming increasingly 
common, according to Symantec. The 
company notes that spearphishing attacks 
can happen to anyone and are usually in 
the form of emails that appear to be sent 
from people you know. They also have 
more personal salutations but have the 
ultimate aim of stealing your credit card or 
other sensitive information. 

I USB 3.0 Devices 

Finding A Place In The Market 

According to In-Stat, 80 million devices using 
USB 3.0 technology will be shipped by the 
end of this year. AMD has started building 
chipsets with SuperSpeed technology built 
in, and the devices that use that technology 
will drive the growth in USB 3.0 that should 
be visible before the end of this year. As 
far as USB in general, In-Stat says that in 
201 there were more than 1 .2 billion mobile 
phones that had USB built in, with high-speed 
USB accounting for more than 75% of all USB 
sales last year. 

I Federal Government 

Seeks To Organize Geospatial Data 

The U.S. government is examining the best 
ways to organize and manage the coun- 
try's geospatial information. In the "Issues 
and Challenges for Federal Geospatial 
Information" report by Peter Folger, a 
specialist in energy and natural resources 
policy, the call to action is for Congress to 
integrate federal, state, and local geospatial 
data sharing via digital image. Statistically, 
about 80% of government data has a geo- 
spatial component, but the government's 
role now involves "coordinating and man- 
aging geospatial data and facilitating part- 
nerships." One current solution involves 
launching a program accessible to govern- 
ment agencies that would distribute satellite 
imagery as digital orthoimagery. 




I White House Announces 
Cloud Migration Plan 

The White House has created a list of fed- 
eral services and in-house IT resources 
that will move to the cloud. As part of the 
project, 25 federal agencies and depart- 
ments were required to name at least 
three services that they would be able 
to move to the cloud. Federal agencies 
making recommendations include the 
departments of Defense, Transportation, 
Education, Energy, State, Justice, Labor, 
Agriculture, and Veterans Affairs, as well 
as the EPA and SBA. In conjunction with 
this announcement, the federal CIO created 
a map to track the progress of data center 
consolidation. By the end of this year, 1 37 
federal data centers will close their doors. 



SECURITY 



Authentication Outlook 

Companies Work To Keep Pace With Changing Technology, Security Needs 



by Sue Marquette Poremba 

Two-factor authentication and 

tokens have been in place for some time as 
the standard for secure computer access. 
Two-factor authentication requires a pass- 
word (something the user knows) along 
with a second authentication factor that 
the user "has." Typically, the second 
authentication factor is a fob that gener- 
ates a predetermined code. 

Most commonly, two-factor authentica- 
tion is done through an RSA SecurlD fob, 
explains Sam Alapati, senior technical 
director at Miro Consulting. "Three-factor 
authentication adds yet another security 
layer to two-factor authentication, typi- 
cally using a biometric means of authenti- 
cation, such as a fingerprint or retina scan. 
The retina scan is the most commonly 
used authentication factor in three-factor 
authentication systems," he adds. "One- 
factor authentication (i.e. using just a pass- 
word for authentication) is less secure than 
a two-factor authentication system, and 
the three-factor authentication system is 
the most secure among all these authenti- 
cation systems." 

No Foolproof System 

Perhaps the biggest issue in authen- 
tication today is that there's no real 
100% foolproof authentication system. 
"A strong one-factor authentication sys- 
tem provides a roughly 90% protection 
against security breaches, and a strong 
two-factor authentication system will 
give you 95 to 96% security protec- 
tion," Alapati says. "Even a three-factor 



Key Points 



Two-factor authentication and tokens 
have been in place for some time as the 
standard for secure computer access. 

Traditional tokens fall short in ease of use. 

Depending on the level of security 
needed, future authentication could mean 
having tokens stored in a mobile device 
in conjunction with a form of biometric 
authentication such as the iris. 



landscape to the point where passwords 
need to be strong, with more characters 
and, in some cases, full sentences. 

The second (or third) step for authenti- 
cation was meant to improve security in 
the access process and has traditionally 
been done with some sort of token, such 
as a smart card with a code number that is 
different for every login. However, Fulton 
says, traditional tokens fall short in the 
ease of usability. 

"I've never seen so much vitriol and 
aggression about any product as Fve seen 
with tokens," Fulton says. "People don't 
like carrying them, and they don't like 
how they have to type in the numbers, 
and if they time it wrong, they have to 
redo the whole process. It's a problem 
that a lot of companies don't like to man- 
age." Not to mention, he adds, tokens 
are easy to lose. "What we're seeing is a 
growing interest in finding ways to make 
that authentication much easier and much 
simpler to manage." 



"I've never seen so much vitriol 
and aggression about any product 
as I've seen with tokens." 



■ DigitalPersona's Jim Fulton 



authentication system will give you 99%- 
plus protection, but never a 100% protec- 
tion against security breaches." 

However, it appears that three-factor, or 
multifactor, authentication has been slow 
to be adopted by businesses of all sizes. 
Two-factor authentication continues to 
be the authentication process of choice 
for most companies, despite the fact that 
recent breaches have shown vulnerabilities 
in the two-factor authentication process. 

"Most organizations use a two-factor 
authentication system as a standard. For 
example, Google has introduced a two- 
factor authentication system for Gmail 
users following an attack on Chinese 
Gmail users. Just recently, Facebook has 
implemented a two-factor authentication 
system, as well," Alapati says. 

Primary Security Function 

Passwords have long been the primary 
security function for computer applica- 
tions, and they aren't going anywhere. In 
fact, Jim Fulton, vice president of mar- 
keting at DigitalPersona (www. digital 
persona.com), says increasing compli- 
ance regulations have changed the access 



With the use of a mobile-device two- 
factor credential, the smartphone can 
essentially be used as a token. "It's a lot 
easier for businesses to deal with because 
there is less inventory to manage, and 
they don't have to deal with lost or bro- 
ken tokens." Burstein says the mobile 
phone credentials are also more secure. 
"If you lose your phone, you know it 
right away and will report it as missing. 
If you lose a token, it could take days to 
notice it's gone." 

However, Burstein quickly points out, 
tokens are not going away. "Most of our 
customers use a mix of credentials because 
you have different user populations who 
require different credential types." 

Look To The Future 

So what do experts think authentication- 
based computer security will look like in 
the future? 

"Security authentication will basi- 
cally be still based on a multiple-factor 
authentication system," Alapati says. "The 
problem is that the more 'factors' there 
are in a security authentication scheme, 
the harder it is for customers to use that 
system. You thus are stuck between two 
mutually incompatible goals: providing 
strong security and user acceptability. The 
more complex and the more layered the 
authentication system is, the harder it'll be 
to encourage users to cheerfully accept the 
login and authorization regime." 

Yvo Van Doorn, sales engineer at 
Likewise (www.likewise.com), thinks 
biometrics will play a major role in 
authentication. "I think in the future, 
depending on the level of security, we 
will have authentication more based on 
tokens stored in our mobile device in 
conjunction with a form of biometric 
authentication such as the iris," he says. 
"Right now, this technology is expensive 
to develop and is only done by a handful 
of companies, akin to mobile phones in 
the '80s," Van Doorn says. 

How long will it take to move into this 
future technology? It may take a little 
while. Van Doorn says. "The problem is 
a lack of standard problem and hardware 
cost problem. Once reliability around bio- 
metrics is improved, fewer devices are 
needed to perform authentication." Also 
important is general acceptance by the end 
user. Van Doorn says. "It always needs to 
benefit them in order for anything to really 
be adopted." - 



What could end up replacing tokens? 
Smartphones, says Jeff Burstein, direc- 
tor of product management at Symantec 
(www.symantec.com). "We've seen our 
customer patterns moving away from 
hard tokens to items that are more con- 
venient to users and businesses," he says. 
"And most specifically, we're seeing a 
move toward use of mobile phones." 

Sensitive Applications, 
Stronger Authentication 



One trend in authentication is a push to make sure it happens closer to the activities the 
business cares most about, says Jim Fulton, vice president of marketing at DigitalPersona 
(www.digitalpersona.com). 

"You may have one set of authentication policies to log in to the computer when you come to 
work in the morning," he says. "You may have a totally different set of authentication policies 
to log in to various applications you use. We're seeing businesses want to use stronger authen- 
tication systems for people who need to log in to the more sensitive applications." 

That could mean using a standard two-factor authentication with a smart-card-type token to get 
on to the computer network but then needing an additional biometric authentication to log on to 
a database. 
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TECH IN-DEPTH 



Key Points 



Pervasive memory scraping takes advantage of data left 
in voiatile memory during the processing of data for 
encrypted sessions. 



Originally targeted toward the retail and hospitality sectors, the 
threat has been popping up in a growing number of data breaches 
in other industries where data can be used for nefarious purposes. 



There are a number of simple security practices that can 
deter pervasive memory scraping. 



Pervasive 
Memory Scraping 

A Growing Threat Thiat Bypasses Encryption 

BY SANDRA KA Y MILLER 

Two years ago, in its annual Data Breach Investigations Report, the Verizon 
RISK Team identified a new attack — RAM Scraper — which was created to 
thwart encryption and pilfer data from volatile memory. Revisited this year at 
the RSA Conference in a presentation by SANS (www.sans.org) researchers 
and instructors Johannes Ullrich and Ed Skoudis, pervasive memory scrap- 
ing has been identified in a growing number of data breach incidents. 



"Many organizations have spent much 
of the past 10 years deploying encryp- 
tion technologies, such as VPNs, SSL, and 
even disk encryption," says Skoudis, who 
is also a senior security consultant for 
InGuardians. "But, if a host is compro- 
mised, and the data is being processed on 
that machine, it is often temporarily located 
unencrypted in memory. So, while it might 
be encrypted for most of its life (while it goes 
across the network and while it is stored on 
disk), some data is often present in clear text 
in memory while it is being processed." 



■ MEMORY LAPSE 

Considered the latest weapon in the hack- 
er's arsenal, pervasive memory scraping is 
designed to capture personally identifiable 
information, or PII, from encrypted sessions. 
"It combs through the memory of a system, 
looking for secrets such as passwords, cryp- 
to keys, or even PII stored there," Skoudis 
says. "It grabs the data and stores it some- 
where, ready to be exfiltrated to a bad guy." 

Though some information about this 
type of malicious attack reports that only 
machines that have had executive privileges 



compromised are at risk, Skoudis says that 
isn't necessarily the case. 

■ AVOIDING MEMORY LOSS 

While many organizations claim to have 
deployed end-to-end encryption, Skoudis says 
that many companies aren't as secure as they 
think they are. "They've encrypted a lot of 
the data's journey, but there are some crucial 
holes in their protection, and it's in memory 
of the machines where the data is being pro- 
cessed," Skoudis says. "This really isn't a 
surprise, because if an attacker completely 
controls a machine where the data is being 
processed, he can grab that data from memo- 
ry. We've known about this kind of thing for 
decades, but now, the tools to implement it 
are becoming much more widely used." 

To prevent pervasive memory scrap- 
ing attacks, there are a number of simple 
steps IT professionals can do to shore up 
their defenses. 

Skoudis suggests to not decrypt data unless 
there is a business need for it. For very sensi- 
tive data, developers may want to consider 
using hardware-based encryption capabilities, 
which safely store secrets (typically keys) 
outside of normal memory so that they can't 
be pilfered. Additionally, Roger Thompson, 
vice president of Web threat research at AVG 
Technologies (www.avg.com), stresses not 
letting any foreign code execute on systems. 

Secure Web browsers with a memory 
sandbox feature will also prevent data loss 
from memory, but these may be difficult 
to use with other applications. 



Because pervasive memory scraping 
attacks result in the stolen information being 
securely transmitted, administrators may 
want to flag any encrypted data leaving a 
system or network that's not permitted or 
expected to be transmitting such data. Q 

Is It Time To Worry? 

SANS (www.sans.org) aims to help organi- 
zations get ahead of the bad guys by alert- 
ing administrators to potential threats, and 
it billed pervasive memory scraping as the 
"most dangerous attack technique likely to 
be used in 2011." 

However, not all security researchers are rush- 
ing to raise the red flag. Roger Thompson, 
vice president of Web threat research at AVG 
Technologies (www.avg.com), does not see 
the threat of pervasive memory scraping hav- 
ing much impact at this point. "I don't think 
it's something that people should be overly 
concerned about at the moment," he says. "It 
is certainly possible that there could be critical 
data left in memory after a program executed, 
but can you say 'needle in a haystack'?" 

Thompson adds, however, that highly spe- 
cialized attacks and specific targets are 
becoming more common. 'The buzzword is 
'advanced persistent threat' and it's happen- 
ing more and more. Certainly you can't not 
pay attention to it, but at this point, I don't 
think I'd lose any sleep over it." 




You don't run a cookie cutter business. 
Why settle for a cookie cutter solution? 

At Pinpoint Network Solutions, our engineers design network 
solutions for your business, your network and your needs. 
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services, Pinpoint Network Solutions will design a network that 
is right for you, and only you. 
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dtSearch 7.67 



NEW PRODUCT 



by Josh Compton 



Text Retrieval At Its Best 



The newest version of the dtSearch 
enterprise and developer text retrieval 
software product line includes enhance- 
ments to the company's proprietary file 
parsers and converters. 

The dtSearch file parsers are integral to 
dtSearch' s ability to perform instant hit- 
highlighted searching across terabytes of 
data in file directories, emails and attach- 
ments, databases, and static and dynam- 
ic online content. The parsers are also 
directly available to developers through 
native 64-bit and 32-bit Win/Linux C++, 
Java, and .NET (through .NET 4) APIs. 

dtSearch products instantly search 
terabytes of text across a desktop, a net- 
work, the Internet, or an intranet site. The 
products feature more than 25 full-text 
and fielded data search options, including 
federated searching, special forensics 
search options, and advanced data clas- 
sification objects. 

dtSearch' s parsers enable automatic file 
type recognition, context extraction, and 
hit-highlighted searching across MS Office 
(Access, Excel, PowerPoint, and Word 
through current versions), OpenOffice, 
CSV, ZIP, HTML, PDF, XML/XSL, and 
other popular file formats. The parsers 
also enable hit-highlighted searching of 
Exchange, Outlook, Thunderbird, etc., data 
and attachments, including ZIP and other 
nested attachments. 




dtSearcK 



www.dltsearch.com 



dtSearch 




Desktop with Sprder 
Network with Spider 
Publish (portable media) 

Web with Spider includes 

^ . , .. 64-bit 
Engine for Lmux ^^„,.„„, 

Engine for Win &.NET 

Instantly Search 
Terabytes of Text 

dtSearch 7.67 

An updated version of the 
enterprise and developer text 
retrieval software product line 
with enhancements to the file 
parsers and converters. 



A built-in 
Spider works 
with local and 
remote, static and 
dynamic (MS 
SharePoint, CMS, 
PHP, ASP.NET, 
etc.) Web content. 
Hit-highlighted 
searching can 
span any level of 
site depth, across 
any number of 
public and private 
or secure sites, 
including sup- 
port for log-ins 
and forms-based 
authentication. 

dtSearch Engine makes available 
dtSearch' s file format support and instant 
searching for a range of Internet, intranet, 
and other commercial applications. The 
dtSearch Engine has native 64-bit and 
32-bit Win/Linux C++, Java, and .NET 
(tiirough .NET 4) APIs, including a 64-bit 
.NET 4 Spider API and sample code for 
the MS Azure cloud platform. dtSearch' s 
developer APIs include a range of API 
filters and objects to support categorization 
via document full-text contents, document 
fields, SQL or XML database contents, or 
data attributes attached during indexing. 



) 483-4637 
www.dtsearch.com 
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PRODUCT SPOTLIGHT 



Unified Threat Management 



Product 



Barracuda NG Firewall 



Description 



The NG Firewall series of unified tfireat management 
devices from Barracuda Networks is composed of 1 1 
hardware appliances for applications ranging from large 
facilities to small branch offices, plus a virtual appliance 
for VIVIware. The latter can be deployed in the cloud and 
in a hybrid mode. 

• Supplies antispam, antivirus, Web filtering, Layer 7 
application profiling, intrusion prevention, and network 
access control 

• The Barracuda NG Control Center interface provides 
management of security, content, and traffic policies 

• Firmware release 5.0 brings support for 64-bit multi- 
processing and Active Recovery technology 

Best For: Enterprises, midmarket organizations, and 
service providers. 



Check Point UTM-1 



Check Point UTM-1 Edge N 



mCteXPtJ^nr ^ ^ ™ ^ 









The Check Point UTM-1 family of turnkey, comprehen- 
sive security appliances has several models covering 
the security needs of organizations ranging from about 
75 users in size to up to 1 ,500 employees. There's zero- 
hour outbreak protection on board in addition to DoS 
and buffer overflow attack mitigation; instant messaging 
and P2P firewalling; and antispam via reputation, white/ 
blacklists, and content analysis. 

• Firewall throughput ranges from 1 .5Gbps in the 
UTI\yi-1 136 to 4.5Gbps in the UTM-1 3076 

• Features IPS, firewall, antivirus, antispyware, URL 
filtering, Web security, and antispam functionality 

• VPN throughput of up to 1 . 1 Gbps in the UTM-1 3076 

• Modular Software Blade architecture allows future 
addition of features such as SSL or IPsec VPN, VoIP, 
and more 

• Support for up to 1 .1 million concurrent sessions in the 
UTM-1 1076, 2076, and 3076 

• IPS throughput of up to 4Gbps in the UTM-1 3076 80 
to 160GB of onboard storage capacity 

Best For: Medium-sized to large enterprises. 




The Edge N series has a very different focus than other 
members of Check Point's UTM-1 lineup. It's directed 
at SMBs and branch offices with pricing to match. Four 
models, including two ADSL editions, share the same 
performance specifications but differ in options such as 
Wi-Fi 802.1 In, 3G modem support. Gigabit Ethernet, 
SFP and USB support, a print server, and more. 

• 1 Gbps firewall throughput 

• 200Mbps VPN throughput 

• 60,000 concurrent firewall connections 

Best For: Branch offices and small to medium-sized 
businesses. 



Product 



Description 



Network Box M-255, 
M-285 & M-385 




Network Box offers a range of UTM devices, with three 
aimed at medium-sized enterprises. New from Network 
Box is the M-385, which makes use of a 3GHz dual- 
core Intel Core 2 Duo processor to power its impressive 
security technologies. The M-285 (pictured) features a 
2GHz Intel Pentium M processor. There's stateful packet 
inspection and packet filtering in the firewall, IDS and 
IDP, anti-malware, antispam/phishing, content filtering, 
IPsec and SSL VPN, and more. 

• Supports up to 1 50 users 

• The M-385 has seven Gigabit Ethernet ports (expand- 
able to 1 1 and with fiber support); the M-285 has four 
Gigabit Ethernet ports and a 100Mbps port 

Best For: Medium-sized enterprises. 



SonicWALL NSA 2400 




SonicWALL says that its NSA 2400 gives small to mid- 
sized businesses comprehensive internal and external 
protection with easy, flexible setup. It boasts six Gigabit 
Ethernet ports plus dual USB connections for potential 
3G wireless modem configuration access. The NSA 
2400 is a next-generation firewall platform, the company 
says, bringing dual-core performance to the table along 
with advanced protection technologies. 

• Application Intelligence and Control addresses leak- 
age of sensitive data 

• Granular control over basic policies and rules 

• Reassembly-Free Deep Packet Inspection uncovers 
hidden threats 

• Gateway antivirus, antispyware, and intrusion 
prevention 

Best For: Branch offices and small to medium-sized 
businesses. 



SonicWALL NSA 4500 




SonicWALL bills its NSA 4500 as a next-generation 
firewall platform for central-site and large distributed 
environments needing high capacity and performance. 
The NSA 4500 includes dual-core processing, IPS, 
SSL VPN, high-availability technology, advanced net- 
working, and proprietary features in an effort to provide 
real-time protection without sacrificing speed. Sonic- 
WALL says that the NSA 4500 supports a large but 
flexible deployment with 1 ,500 site-to-site VPN tunnels, 
500 global VPN clients (3,000 maximum), two SSL VPN 
NetExtender clients (30 maximum), and two Virtual 
Assist Technicians (1 maximum). 

• Reassembly-Free Deep Packet Inspection firewall 

• SonicWALL Clean VPN secures tunnel access 
and traffic 

• Application Intelligence and Control prevents 
data leakage 

Best For: Midsized businesses; central-site and large 
distributed environments. 
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C U R I T Y 



Processofs Product Spotlight highlights options available in key data center product categories, providing product information side-by-side for easy comparison. 

Compiled by Marty Sems 



Crossbeam Systems X-Series Fortinet FortiGate-3040B 




The X-Series Network Security Platform family from 
Crossbeam brings together a quartet of security applianc- 
es for a range of needs. The X20, X30, X60, and X80-S 
are based upon a blade-style, modular architecture — 
what Crossbeam calls an open, adaptable platform — for 
expandability. Each encloses at least one APM (applica- 
tion processor module), an NPM (network processor 
module), and a CPM (control processor module), along 
with Crossbeam's latest XOS operating system. 

• Models support throughput of 5Gbps in the X20 to 
150Gbps in the X80-S 

• APM blades are available with up to 12 cores 

• The updated XOS operating system version 9.5 sup- 
ports more security applications 

Best For: Service providers, telcos, and large enterprises. 



I 




High-bandwidth networks require high-bandwidth 
security. The FortiGate-3040B from Fortinet is up to 
the challenge. Sporting the highest 10Gb port density 
in its class, according to Fortinet, the FortiGate-3040B 
provides subscription-based, real-time security cover- 
age. And with its purpose-built FortiASIC processors, 
it doesn't bog down the network. 

• Hardware-accelerated lOGbps Ethernet SFP+ and 
1Gbps SFP ports 

• 40Gbps firewall and 16Gbps IPsec VPN throughput 

• Can support up to 4 million concurrent sessions and 
100,000 new sessions per second 

• 1 .2Gbps antivirus and 5Gbps IPS throughput 

• Redundant, hot-swappable power supplies 

Best For: Large enterprises. 



Juniper SRX Series Services 
Gateways For Tine Brancli 




Juniper says its SRX Series Services Gateways For 
The Branch UTMs are the only solutions that consoli- 
date switching, routing, and security services in a single 
device to connect, secure, and manage any network. 
With five models for branch offices (and another five for 
the data center), the SRX series aims to deliver proven 
security services combined with superior availability and 
performance, while reducing total cost of ownership. 

• Firewall, VPN, IPS, antivirus, antispam, Web filtering, 
and content filtering 

• Wizards for quick and easy deployment 

• AppSecure application-level monitoring and firewall 

• Integrated and centralized reporting, configuration, 
policy management 

• Integrated WAN/routing/QoS with Ethernet, 3G, LTE, 
T1/E1, xDSL, serial, and DOCSIS-3 options 

Best For: Branch offices and small to medium-sized 
businesses. 



Trustwave Unified 
Tlireat Management 




Trustwave says that its Unified Threat Management 
delivers a combination of critical security technologies 
in a single, cost-effective package. With two tiered 
models to fit a variety of perimeter security needs, 
Trustwave UTM is available as an appliance or as a 
fully managed service. Fully configured with antivirus, 
VPN, intrusion prevention, and a firewall, the appli- 
ances can furnish a total throughput of between 4Mbps 
(TS-10) and 124Mbps (TS-100). 

• Stateful firewall 

• Inline IPS 

• Web and email gateway antivirus 

• Web content filtering 

• Site-to-site and remote user VPN 

• Remote application access control 

Best For: Small, medium-sized, and distributed 
enterprises. 



WatchGuard XTM 5 Series 




uHEjuuuuulj 



A suite of management tools and enough speed to han- 
dle high-speed LAN backbone infrastructures and IGbps 
WAN connections mark the WatchGuard XTM 5 series 
of UTMs for midrange enterprises and SMBs. IT man- 
agement access is provided by a centralized console, 
a CLI with script support, and a browser interface. The 
scalable XTM 5 series also comes with enhanced report- 
ing skills and real-time monitoring provisions. 

• Throughput up to 2.3Gbps firewall, 800Mbps XTM, 
and 750Mbps VPN in the XTM 530 

• Up to 350,000 concurrent connections in the XTM 530 

• 2,500 local user database 

• Up to 600 branch office and 1 ,000 mobile VPN tunnels 
in the XTM 530 

• Seven interface ports (six GbE and one FE) 

Best For: Small to medium-sized businesses. 



WatchGuard XTM 8 Series 



uuuu uuuuuuB 



The WatchGuard XTM 8 family of three UTM devices 
addresses the myriad security needs of main offices, 
headquarters, and other major facilities. The XTM 8 
products supply full HTTPS inspection, IPS, antispam, 
and antivirus, plus optional features such as URL filter- 
ing, app control, reputation-enabled defense, and more. 
Administrators have access to the XTM 8 via scriptable 
command line, Web console, and WatchGuard System 
Manager. The system also provides rich reporting, real- 
time monitoring, clustering, and high availability (active/ 
active and active/passive) features. 

• Throughput up to 5Gbps firewall, 1 .6Gbps XTM, and 
1.7Gbps VPN in the XTM 830 

• Up to 1 million concurrent connections in the XTM 830 

• Up to 6,000 branch office VPN tunnels in the XTM 830 

• 101 Gbps Ethernet interface ports (four fiber ports 
optional) 

Best For: Main offices/headquarters, medium-sized to 
large enterprises, and data centers. 
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STORAGE 



HOW TO 

Manage Access Rights 

In A Disaster Recovery Situation 

Planning & Testing Is Half The Battle 



by Chris A. MacKinnon 

Part of the disaster recovery battle is 
managing access riglits on the network. It's 
hard enough to manage everything after a 
disaster occurs, but once systems are back 
online, getting your users back into the sys- 
tem can also be a management headache. 
How can you get access to your users quick- 
ly? What's the best way to allow access for 
temporary personnel? Here we take a look 
at what administrators can do to keep their 
users connected during a disaster event. 

Understand Your Access 

During a disaster, things can be disorga- 
nized, especially without planning. Mark 
Buchanan, director of information security 
at Savvis (www.savvis.com), says without 
proper planning and documentation, individ- 
uals will not be able to react appropriately 
to a disaster. Buchanan comments, "The 
balance of business logic and sound process 
is skewed with the need to recover from a 
disaster occurring. With access rights, as 
people are moved around to satisfy require- 
ments that they are not used to fulfilling, or 
the system administrators are asked to make 
changes to keep business functions up and 
running, the organization of the access con- 
trols move further from standard business 
process, unless processes have been estab- 
lished prior to the event occurring." 

Bob Roudebush, vice president of mar- 
keting at Neverfail (www.neverfailgroup 
.com), says most of the issues that can 
arise during a disaster are a direct result 
of the IT organization not understand- 
ing what applications depend on access 
rights and where those access rights are 
stored. "With such a vast array of dif- 
ferent types of applications in use today, 
some with built-in access rights manage- 
ment and others who depend on a central- 
ized directory service such as Microsoft 
Active Directory, it's hard to ensure that 
directory information that applications 
might require is adequately protected," 
Roudebush explains. 



TOP TIPS 



Plan, Test & Manage 

Assuming access rights are protected ini- 
tially and are available (either as part of an 
application or as part of a directory service 
that is running at the disaster recovery site), 
it's important to manage two things very 
closely, says Roudebush. "The first," he says, 
"is contingency plans for assigning additional 
users elevated privileges, or new privileges 
entirely, in the recovery environment. We 
assume, incorrectly sometimes, that person- 
nel wiU be available during the aftermath of 
a disaster. It's likely some IT administrators 
wiU not be available while contingency plans 
are being executed. In this case, it's impor- 
tant to have a mechanism by which you can 
assign other users appropriate rights to ensure 
the complete restoration of services." 

The second issue, Roudebush says, 
which is directly related to the first, is 
ensuring that required auditing and com- 
pliance policies are maintained in the 
disaster recovery environment as required 
by government or industry regulations. 

Savvis' Buchanan says IT and data 
center managers can best manage access 
rights by ensuring that common disasters 



are planned and tested for. "Ensure sys- 
tems are redundant from a data center per- 
spective, and capacity is appropriate for 
HVAC, power, staffing, and telecommuni- 
cations. From a system level, ensure that a 
plan is in place to bring up the most criti- 
cal systems first. The system plan needs to 
be documented and updated and the team 



Key Points 



• Most issues that can arise during a disas- 
ter are a result of an organization not 
understanding winat applications depend 
on access rights and where those access 
rights are stored. 

• Two things should be managed closely in 
the recovery environment: 1) contingency 
plans for assigning additional users ele- 
vated privileges or new privileges entirely, 
and 2) ensuring that required auditing 
and compliance policies are maintained. 

• Getting started should involve defining 
access rights in advance, documenting 
them, and having backups of the rights in 
a secure location so they can be recov- 
ered with minimal loss of time. 



supporting those systems needs to review 
them on a regular basis," Buchanan says. 

From a user perspective, Buchanan says 
communication to the users about how to 
access key systems needs to be discussed 
with communication plans around tell- 
ing users about any changes to processes 
or system usage. Buchanan also says the 



more of these items that can be automated, 
the better. "It is important, however, to 
ensure that testing of the automation is on 
the list of items to test during exercising 
the disaster recovery plans." 

Getting Started 

Geary W. Sikich, subject matter expert 
with Lootok (www.lootok.com), agrees 
planning is a good methodology to employ 
in the pre-disaster environment. "Although 
planning is key, it is generally resisted by 
most organizations that question the value 
and the time spent on planning. They don't 
fully realize the value is having readily 
implementable procedures in place, reduc- 
ing the effect of disruption and facilitating 
an organized and effective response." 

Paul Kirvan, senior consultant with 
Lootok, says getting started involves defin- 
I ing access rights in advance, documenting 
them, and having backups of the access 
rights in a secure location so they can be 
recovered with minimal loss of time. He 
notes, "Also ensure that relevant details on 
access rights and how they should be recov- 
ered are included in the technology disaster 
recovery plan. Carefully examine and assess 
the risks, threats, and vulnerabilities associ- 
ated with access rights." Kirvan says it's 
also important to determine the users who 
are the most critical to the business so that 



restoration of their access rights can be pri- 
oritized. Document this information and 
include it in your disaster recovery plan. 

Neverfail' s Roudebush says organiza- 
tions need to understand how their users 
interact with its IT infrastructure. "They 
need to select a solution that is appropriate 
I for their organization's access needs and 
conducive to the way they work. While it's 
important to implement a disaster solution, 
you want to make sure you choose the right 
one because it protects access to critical 
data and applications," Roudebush says. 
The focus, he continues, should be on con- 
tinuous availability and access to critical 
systems, rather than recovery, which will 
interrupt important processes. 

According to Buchanan, it's also important 
to gather executives or key people together 
and taUc through exactly what the disaster 
involves and have them talk through the inci- 
dent and ensure there is consensus on how 
well each of the elements could perform. 
When exercising, rely on the documenta- 
tion over the people in the room. While we 
hope no individual is harmed during a disas- 
ter, this isn't a realistic situation if it's not 
written down. During the exercise, you need 



someone to transcribe the events. This pro- 
vides a list of the gaps that will need to be 
addressed and provide lessons learned which 
can be used for the next exercise," he says. 

I Tools & Cost Investment 

As for the precise tools to invest in, 
Buchanan says it depends on each organiza- 
tion's environment and what applications are 
critical to ensuring uninterrupted operations 
during an outage. "However, in general," 
he says, "it's most likely that some sort of 
real-time data replication mechanism must 
be employed to ensure that an up-to-date 
copy of data is available at the recovery site. 
Common approaches include application- 
based replication or fault tolerance features, 
storage-based replication of data, or host- 
based software solutions which provide rep- 
lication and failover for IT systems." 

An up-to-date copy of directory services 
and access rights information is especially 
important, Buchanan says, as this informa- 
tion changes continually and a once-a-day 
backup of it is insufficient for completely 
recovering at the disaster recovery site. 

Lootok' s Sikich says there are myriad 
tools available and offered by the major 
software and systems providers. He com- 
ments, "Invest the time to compare and 
analyze different products to ensure they 
meet your organization's specific needs. _ 



Bob Roudebush, vice presi- 
dent of marketing at Neverfail 
(www.neverfailgroup.com), 
offers the following tips 
when it comes to managing 
access rights in a disaster 
recovery situation: 

■ Test it. No organization 
would install a fire alarm 
system and just assume 
that it works and employees 
can evacuate safely, so 
why would an organization 
implement a disaster recov- 
ery solution without testing 
it? Evaluate the disaster 
recovery plan on a regular 
basis and make sure the 
team will have access even 
in the event of a disaster. 



Don't wait to try it out until 
disaster has struck. 

■ Application dependen- 
cies. Application service 
availability is often deter- 
mined by a network of 
interdependent services, 
including access rights and 
directory services as well as 
network connectivity, back- 
end database components, 
and other network services. 
Availability can be difficult 
to define and failure prob- 
ably difficult to measure or 
compute. It's important to 
choose protection solutions 
that are application-aware 
and can ensure that all of 
the components and services 



that applications depend on 
are protected. 

■ Complexity. In the effort 
to choose the appropri- 
ate protection strategy for 
applications and the access 
rights they depend on, it's 
easy to fall into the trap of 
over-engineering a solution. 
Remember that increased 
system complexity could lead 
to lower service availability. 
Think about the increased 
likelihood of an operator error 
leading to availability issues, 
increased number/types of 
components, and the addi- 
tional complexity involved in 
administering and configuring 
these solutions. 



"It's likely some IT administrators will not be available while 
contingency plans are being executed. In this case, it's important 
to have a mechanism by which you can assign other users 
appropriate rights to ensure the complete restoration of services." 

- Neverfail's Bob Roudebush 
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WeBuyUsedTape.net 

We pay top dollar for 
your new and used tapes. 

• 35 years experience; 20 years same facility 

• DoD, HIPAA, and SOX-approved processes 

• References available— all industries 



We make it easy: 

• Submit your list of media: online, email, or fax 

• Receive a confidential offer within 24 hours 

• Documentation and shipping arrangements prepared 

• Tapes received and verified at our secure facility 

• Data eradicated using safe and approved processes 

• Receive payment and Data Destruction Certificate 

Contact us now! Free Shipping and Fast Pay! 
(800) 821 -1 782 www.WeBuyUsedTape.net 
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Financial Services IT 
Departments Look For 
Cloud Expansion 

A recent Bloomberg survey of execs at financial 
services firms seems to indicate two things: IT 
departments in U.S. financial services compa- 
nies plan to spend more money over the next 
year or two than they have over the past couple 
of years, and they plan to spend much of it on 
cloud-based implementations that may include 
desktop virtualization, regulatory compliance, 
and managed services. 

Such expenditures are on the rise, perhaps 
partly as a reflection of increased confidence 
in the economy, with some 76% of sun/eyed 
financial services execs reporting that they 
intend to increase IT funding over the com- 
ing year. In addition to confidence in the 
rebounding economy, another key driver 
for the increase seems to be the necessity 
of keeping up with expanding compliance 
requirements: About 84% of respondents 
have increased spending on regulatory and 
compliance systems in the past two years, 
while only 5% decreased such spending 
and 11% have maintained the same rate 
of compliance-related spending. A recent 
Ponemon Institute survey indicates that the 
cost of achieving regulatory security compli- 
ance is about $3.5 million yearly, thus lending 
increased importance to cost-saving endeav- 
ors related to compliance efforts. 

Best ROI 

Asked what sorts of investments yielded the 
best ROI over the past year, about 45% of 
respondents indicate that cloud computing 
has produced the best return, so it's no sur- 
prise that more than half (about 55%) expect 
to shift CAPEX spending to various forms of 
managed solutions. Most respondents feel 
that such cloud-based solutions — which can 
include applications and databases, informa- 
tion services, software production, supply 
chain management, and IT itself — will allow 
them to process more data more quickly, 
cheaply, and reliably. 
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About 50% of respondents indicate that 
cloud spending in general will increase over 
the coming year. Of the remaining half of 
respondents, about 28% indicate that they 
will instead increase spending in the area of 
complex event processing, while 22% say 
that spending on low-latency trading imple- 
mentations will increase. 

Yet, in spite of what seems to be a sub- 
stantial level of commitment to cloud-based 
services, almost half (49%) of those surveyed 
indicate that the current status of their cloud 
computing deployment was either "Under 
consideration but not being implemented" or 
"Not a priority." This would seem to indicate 
that much remains to be done in terms of 
securing real-world investment in business 
implementations of cloud-based solutions. 
Of the remaining 51% of respondents, about 
37% report using a private cloud solution, 
while 14% indicate that they are using a pub- 
lic cloud solution. 

by Rod Scher 



MESSAGING & TELEPHONY 



Is Your Email System 



Up To Par? 



Staying Up-To-Date On IT's Most Ubiquitous Tool Is Vital To Productivity 



by Robyn Weisman 

IT DEPARTMENTS WORLDWIDE are deal- 
ing with an email uprising of sorts. No 
longer are employees willing to put up 
with mailbox size limits or limits to the 
size of documents they send across the 
Internet, nor are they willing to be forced 
to use email to contact others when SMS 
texting or chat offer faster response times. 
And don't expect them to follow complex 
protocol when accessing email remotely, 
when Web-based email services let them 
do so easily without size restrictions. 

Mimecast, a unified email management 
provider, recently released a survey titled 
"Generation Gmail" that discusses workers' 
frustrations with corporate email restric- 
tions and how many users work around 
these constraints by using personal Web- 
based email accounts "to remain as produc- 
tive and flexible as possible." In fact, one 
of the most notable findings is that 79% of 
those surveyed send work emails from their 
personal email accounts, with one in five 
doing so on a regular basis. 

"It all boils down to access," says 
Orlando Scott-Cowley, a technical evan- 
gelist at Mimecast (www.mimecast.com). 



system] starts deleting things, users send 
emails and documents to Web mail accounts 
to keep just in case they need access to them." 

Additionally, social networks often give 
employees a more immediate way of com- 
municating with coworkers and customers 
than email or voice. "They can find oth- 
ers via direct message on Twitter more 
quickly and get a faster response, and they 
become trained to use that instead of a 
corporate email account," Warrene says. 

Make Better Tools Available 

Warrene, a onetime CIO at a financial ser- 
vices firm, says that to deal with employees 
going outside the boundaries of corporate 
networks, IT needs to provide useful solu- 
tions that can be integrated into the cor- 
porate email network. For example, some 
file- sharing tools come with plug-ins that 
integrate the service directly into Outlook. 
The user can transmit a massive file as if it 
were a 20KB plain-text email, while system 
administrators can track, secure, and archive 
the file with the same level of ease. 

"If you truly want to be secure in your 
environment, make sure you provide a tool 
for transmitting attachments that has been 
proofed, tested, piloted, and approved by 



Key Points 



Employees may be circumventing corpo- 
rate email systems for Web-based email, 
social networking, and file-sharing ser- 
vices because corporate email systems 
fail to provide the tools employees need 
to be productive. 

Enterprises can avoid the security risks 
of workaround solutions by making better 
options available to their employees. 

Make sure your core software, such as 
Exchange and SharePoint, are up-to- 
date and can play nicely with new social 
networking tools. 



access reached any sort of tipping point. 
Gode points out that even if you are run- 
ning Exchange 2010, you might encoun- 
ter performance issues when connecting to 
employee iPhones because of the way Apple 
has implemented its ActiveSync protocol, 
but connecting 20 iPhones, let alone 200 
iPhones, to Exchange 2003 or 2007 will 
impact performance. 

Up-to-date versions of Exchange and 
SharePoint offer greater flexibility for 



"If you truly want to be secure in your environment, make sure 
you provide a tool for transmitting attachments that has been 
proofed, tested, piloted, and approved by your IT department." 



- Azaleas' Scott Gode 

"If you have instant access to a Gmail 
account on your cell phone, and your 
employers still enforce rigorous remote 
access controls, you're going to use 
Gmail. It's easier and ubiquitous." 

Why Employees Go Rogue 

Many of today's problems stem from 
the tension between laudable yet out- 
dated email security best practices and 
the proliferation of mobile access. "These 
requirements for access and authentication 
have made the act of logging in to cor- 
porate email accounts laborious," Scott- 
Cowley says. "Mobile access is driving 
broadband speeds and the amount of data 
being used over the Internet, and people 
are demanding that they get mobile access 
with their phones without having to jump 
through hoops to send and receive email." 

Also, too many corporate email systems 
are failing to provide enough value to their 
end users, explains Blane Warrene, CEO 
of Arkovi (www.arkovi.com). "Normal 
users are not going rogue for sinister rea- 
sons when they use another email system 
instead of their corporate one," he says. 
"Oftentimes it's, T can't send a 20MB file, 
but I can on Gmail or Hotmail.' They do it 
to do their jobs quicker, better, and faster." 

Another longstanding bugaboo for employ- 
ees is limited mailbox size. "It's an issue that 
has plagued users as long as they have had 
access to emaU," Scott-Cowley says. "If users 
can only keep 500MB of data before [the 



your IT department," says Scott Gode, vice 
president of product management and mar- 
keting at managed UC communications pro- 
vider Azaleos (www.azaleos.com). 

Go For The Latest & Greatest 

Of course, tools such as those mentioned 
above won't work with earlier versions of 
Microsoft Exchange because the older soft- 
ware was designed and brought to market 
before social media and ubiquitous mobile 



providing your users with the tools they need 
to stay within your email system. "The latest 
version of Exchange lets you create a much 
larger standard-sized mailbox for every user 
and also come up with an archiving system 
[where] if your users should exceed their 
mailbox size limit, automatic archiving gets 
triggered," Gode says. "It's still easily acces- 
sible by them without clogging your core 
inbox, and so the overall performance of 
your system stays up to snuff." 



Top Tips From Mimecast 



Here are a few of the tips Orlando Scott-Cowley, technical evangelist at Mimecast (www. mime 
cast.com), suggests for getting your users to use your email system instead of outside tools: 

• Get the most up-to-date email platform you can. "The tools available in the latest versions 
of Outlook and Exchange are exciting for users and keep them inside the network," Scott- 
Cowley says. "Give them the tools they need, [such as] remote access, threaded messages, 
and powerful search capabilities." 

• There is no excuse not to provide your users 1 00% uptime for your email system because the tech- 
nologies are there and are inexpensive. "If your solution is available 95% of the time, that's still a big 
chunk of downtime. Your users will be inclined to use outside solutions, and once they realize how 
easy it is to do that, you risk them going back to them on a regular basis," Scott-Cowley says. 

• Explain to your users what you mean by appropriate use and explain the benefits of the busi- 
ness system. "Use policy violation notices to educate users, rather than to punish them. This 
process should be automated to minimize IT resource burden," Scott-Cowley says. 

• Make mobile access work, with security protocols that are well understood and simple to 
execute. "If you support one type of mobile device, consider what users of the other device 
will do. How can you securely enable support of more platforms? The platform ecosystem is 
getting more fragmented, not less," says Scott-Cowley. 
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Control Communications 



Once They Leave 
The Enterprise 

Know Your Options For Safeguarding Emails, IIVIs & IVIore 



by Robyn Weisman 

During the early days of the Internet, 
few thought about how important email, 
let alone other types of messaging, would 
be to a business. Until rules for ESI (elec- 
tronically stored information) were formally 
put into effect in late 2006, attorneys could 
argue that electronically created documents 
were not valid forms of evidence until a 
hard copy was available. 

Five years later, we know that email, 
instant messaging, testing, and various 
forms of social media are legitimate records 
of conversations and other information 
related to an organization. But no matter 
what precautions you take to protect your- 
self from liability and other concerns, once 
an email leaves your network, it's out there 
pretty much for eternity, whether on your 
server, another party's server, or even on 
a random PST file that has survived on 
the desktop of a former employee. And 
those legal disclaimers commonly found at 
the bottom of email may not be enough to 
shield you from legal and regulatory issues 
down the road. 

So how do you control your commu- 
nications once it leaves the enterprise? 
Well, you can't, not with today's technol- 
ogy. However, there are several things 
you can do before and even as it leaves 
your network that will put you 
in a better situation. 



"Certain permanence receiving agents 
[means] that the email I send you is kept in 
your maU server, and even once you've read 
and discarded it, there's a good chance it wiU 
get caught up in a backup archive," he says. 

Moreover, you can't even assume that 
storage of this correspondence will be lim- 
ited to the two parties exchanging emails 
because email transfer protocols are inse- 
cure. "Anybody between those two des- 
tinations could easily intercept them. It's 
surprisingly simple to spoof emails through 
phishing and spear phishing," Morrison 
points out. 

Catch Me Before They Can 

Unfortunately, the one thing email has in 
common with its analog forebear is that once 
you press the Send button, it's gone. "Once 
it's out there, you can't claim it at some 
point in the future," says James Quin, lead 
research analyst at Info-Tech. "Your only 
real control point is as it's leaving the perim- 
eter of your network, unless you're forcing 
or mandating encryption." 

Quin says that DLP (data loss protec- 
tion) is the most effective and reasonable 
solution available to SMEs. DLP scans out- 
going email, Web traffic (including Web- 
based email), IM traffic, FTP, and other 
modes that send electronic information out 
of an organization. 



Key Points 



You no longer have control over email or 
similar electronic communications once 
they leave your enterprise network. 

DLP solutions check outbound communi- 
cations at the network perimeter, blocking 
potentially sensitive or othenwise problemat- 
ic information from leaving the organization. 

Encryption may be the most foolproof 
protection for outbound email and other 
communications, but its adoption thus far 
has been limited because encryption is a 
hassle to set up and get others to use. 



Nevertheless, a great deal of review time 
is necessary to make sure that outgoing 
communications aren't being flagged willy- 
nilly. "DLP isn't a tool that you can buy 
and implement over a weekend. IT needs to 
interact with the legal team, HR department, 
and company executives because [DLP] use 
impacts all aspects of a business," Quin says. 

Encryption Tipping Point 

Email encryption technology has been 
available for years for Microsoft Outlook 
and other email clients, and at first glance, 
it seems the best solution for protecting 
potentially sensitive communications. 



(Un)Ease Of Use 

According to Scott Morrison, 
CTO at security and connectiv- 
ity solutions provider Layer 7 
Technologies (www.layer7tech 
.com), the Internet, by nature, 
has been designed to be decen- 
tralized and distributed. "Once 
an email [or similar commu- 
nication] is out of your hands, 
it really is out of your hands 
and preserved for a long time," 
Morrison says. 

Morrison says too many people still take 
the snail-mail metaphor too much to heart, 
assuming a given email is correspondence 
solely between the sender and receiver. 



"DLP isn't a tool that you can buy and 
implement over a weekend. IT needs to 
interact with the legal team, HR department, 
and company executives because [DLP] 
use impacts all aspects of a business." 



Dump It 



Because bytes are so cheap, many orga- 
nizations mistakenly believe they should 
archive all their communications in perpetu- 
ity. But doing so may put your business at 
unnecessary risk, says Dave Hunt, CEO of 
archiving firm C2C Systems (www.c2c.com). 

"If data is past its retention period, get rid of 
it. Then if somebody comes up with a single 
email that appears incriminating, a reason- 
ably good lawyer can argue that one email 
can't be taken as proof of guilt because 
subsequent emails may have rejected that 
email's claim," Hunt points out. 



info-Tech's James Quin 



DLP solutions review outgoing traffic 
on a policy-by-policy basis, checking for 
keywords, data strings, and proximity of 
information, among other qualifiers, to sift 
out potentially sensitive data. "If it sees the 
keywords 'Social Security,' or a data string 
of 16 digits that starts with a 4 (Visa) or 5 
(MasterCard), it can block it from leaving or 
flag it for a human to review," Quin says. 

Although DLP historically has been too 
pricey for many SMEs, the prices for these 
solutions are falling as vendors increasing- 
ly push these solutions downstream. And 
regardless of price, DLP requires that IT 
invest a great deal of time configuring it to 
fit your business. "You can't expect to tick 
three checkboxes and not have to look at it 
again because this sort of tool can operate 
thousands of policy rules," Quin says. "You 
don't have to start from scratch because if 
you care about, say, PCI DSS compliance, 
it can turn on a bunch of prewritten rules 
that will address that." 



"People can't spoof [encrypted] email or do 
anything else to compromise it — and these 
files are nothing more than encrypted blobs 
when saved to backup," says Morrison. 

So why hasn't encryption become a core 
part of protecting outbound communica- 
tions? Morrison says the reasons tie back 
to the Internet's convenience. "People 
love the ability to instantly access infor- 
mation with no fuss, and if anything, our 
tolerance for putting up with any limits 
to access and connectivity has lessened 
over the years," says Morrison. "And if 
I say I'm going to use encrypted email, 
but you aren't, the value proposition just 
isn't there." 

For his part, Morrison doesn't see this sta- 
tus quo changing until something fairly cata- 
strophic happens that wakes everybody up to 
the point of acknowledging that the current 
situation is no longer tolerable. "Then we'll 
start to put up with the hassle and logistics of 
setting up [encryption]," he says. ' 



New Software Project 
Spending To Equal 
Maintenance Costs 

In 201 1 , companies will for the first time 
spend half of their IT budgets on new soft- 
ware initiatives and half on maintaining 
ongoing operations, according to a new 
report by Forrester Research. Reasons 
include lower TCO of existing software 
and IT budgets that have expanded post- 
recession. Forrester predicts that new 
project spending may outstrip maintenance 
funding by as much as 10% in two years. 

With assistance from Linkedin Research 
Network, Forrester surveyed more than 
2,400 IT execs and technology decision- 
makers from SMBs and enterprises in North 
America and Western Europe in September 
and October of last year. 

Currently, the software market — referred to 
by Forrester as IT'S biggest subsegment — 
is driving the growth of the information and 
communication market. Most of the pro- 
jected growth through 2015 will be in the 
applications and middleware segments, the 
firm says. 
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By The Numbers 

Critical or high priorities for respondent 
initiatives this year include modernization 
of legacy apps (66%), version updating of 
packaged applications (63%), increased 
usage of Bl (business intelligence) and 
decision-support tools and services (56%), 
enterprise app consolidation or rationaliza- 
tion (55%), additional use of collabora- 
tion (53%), enhancement of CRM (43%), 
proliferation of mobile apps (41%), and an 
increase in SaaS usage (34%). 

Bl led the list of software types companies 
plan to adopt or expand in 201 1 (38%). 
Collaboration (37%), CRM (35%), industry- 
specific process (33%), and financial/ 
accounting software (28%) rounded out 
the top five priority categories. 

There's also a trend toward more flexible 
software acquisition terms. Traditional licens- 
ing dropped from 82% of licensing budgets 
in 2008 to 71% this year, while subscriptions 
and pay-per-use increased from 1 8% to 29% 
in the same period. 

Growth areas will include software that 
adds value to a business, such as industry- 
specific solutions, Bl, and decision-support 
utilities, Forrester says. Meanwhile, there's 
a decline in emphasis on administrative 
back-office software such as human capi- 
tal management and enterprise resource 
planning, which are the leading candidates 
for SaaS. 

Being the fastest-growing cloud segment, 
SaaS will grow to 37% in 201 1 and surpass 
the 50% mark next year, Forrester says. 
SaaS is popular with companies of all sizes, 
but more so with larger organizations. In the 
next two years, 20 to 30% will fully replace 
some onsite solutions with SaaS. 

by Marty Sems 
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Tablets Slicing 
Into HDD Growth 

In addition to tal<ing a bite out of tlie PC 
marl<et, tablets are also wreaking havoc 
on the hard disk drive market. According 
to IHS iSuppli, revenue for HDD manu- 
facturers and retailers will drop 3% by the 
end of the year compared to 2010, and 
tablets, with their sole reliance on flash- 
based memory, are driving the decline. 
Fang Zhang, storage analyst at IHS iSup- 
pli, notes that consumers with limited bud- 
gets are delaying PC purchases in favor 
of less expensive tablet alternatives. IHS 
iSuppli expects 59 million media tablet 
units to ship in 201 1 . 

Despite the decline, HDDs aren't exactly 
on the way out, especially in the enterprise 
arena. "HDDs in desktop and mobile PCs 
represent about 70% of total shipments 
and 60% of the total revenues for 201 1 ," 
Zhang says. "HDDs in the enterprise rep- 
resent 10% of unit shipments and 18% of 
total revenues." The remaining HDD mar- 
ket consists of automotive, set-top box, 
airport, camera, and MPS player hard- 
ware. Zhang goes on to say that consumer 
adoption of cloud-based offerings will 
actually drive enterprises to ramp up their 
reliance on high-capacity HDDs to 
meet the demand. "We see rev- 

Senue drop in the consumer 
PC market with tablet 
adoption, and the enter- 
prise HDD market will 
p- continue to grow," 

s, Zhang says. 




What's Behind The Shift? 

Limited budgets may be the driving force 
for consumer adoption of tablets, but 
Zhang says that the current economy is 
only part of the picture. For consumers, 
tablets offer a more compelling experi- 
ence that PCs simply can't compete with, 
and as a result, consumers are putting the 
money they might have spent on new PCs 
toward tablets. IHS iSuppli doesn't expect 
PCs to begin to compel people to upgrade 
until sometime next year, when longer bat- 
tery life, thinner and lighter designs, and 
faster processors come out. 

Although SSDs have had some impact 
on the decline in HDDs, Zhang says that 
fast data transfer applications don't com- 
pete with tablets due to SSDs' limited stor- 
age capacities. But most if not all of the 
storage manufacturers are well positioned 
to weather any transition: "Almost every 
HDD maker has an SSD offering now or 
will have one in the near future to capture 
all PC-related storage requirements," 
Zhang says. 

IHS iSuppli claims that the future isn't 
exactly bleak for HDDs; between now 
and 2015, HDD revenues will increase 
from $28 billion this year to an estimated 
$32 billion. 

by Andrew Leibman 
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Service Contracts: 
Do They Make Sense? 

Consider Average Life Cycle Of Equipment vs. Price Of Contract 



by Sue Marquette Poremba 

When purchasing new equipment for 

enterprise use, the manufacturer or reseller 
is bound to offer some sort of service con- 
tract. But does it make sense for a com- 
pany to purchase a service contract? 
In general, the answer is "it depends." 

Why Choose A Service Contract? 

One of the primary reasons to consider 
a service contract is to cover the exper- 
tise not found within the company. "It's 
impossible to compile the type of exper- 
tise you'd need in-house to host every 
kind of solution," says Scott Herron, presi- 
dent and CEO of MaintenanceNet (www 
.maintenancenet.com). "You have to be 
able to call on experts when you find you 
are having issues, and unless you have 
contracts to talk to experts who can help 
you walk through the problem, you are 
going to be dangling out in the wind." 

Herron says his company uses service 
contracts and points out his own experi- 
ences and explains why such contracts 
have been vital to his business. 

It begins with the intelligence of today's 
hardware. "We have a lot of redundancy 
built into hardware today, so you can order 
servers with multiple power supplies, mul- 
tiple drives in a single rack system," Herron 
says. "The administrator will be notified 
when one of those components is failing." 
In MaintenanceNet' s infrastructure, Herron 
explains that the company has between 200 



Key Points 



A primary reason to consider a service 
contract is to cover areas where exper- 
tise lacks within the company. 

The types of companies that will find the 
most benefit from purchasing a service 
contract are ones that maintain a mul- 
tivendor environment, have equipment 
classified as EOL or EOS, are experienc- 
ing warranty expirations, and are looking 
to cut maintenance costs by consolidat- 
ing multivendor contracts. 

Although adding staff may seem to be 
a reasonable alternative to service con- 
tracts, generalists can't fix everything. 
Sooner or later you will need an expert. 



service contract on the chance that a 
computer will have a catastrophic failure 
within that two-year period isn't worth the 
money." Nolan explains that it would have 
to be a catastrophic failure because in most 
cases, someone within his company can fix 
the computer by replacing the hard drive 
or memory for minimal cost. "Of course, if 
the service contract was a lot lower, then it 
would make sense," he adds. 

Companies That Benefit 

The types of companies that will find 
the most benefit from purchasing a ser- 
vice contract are ones that maintain a mul- 
tivendor environment, have equipment 



Not all equipment needs to have a service 
contract. Nolan points out that determining 
the overall value of the equipment and then 
adding in the equipment's life cycle vs. the 
cost and life cycle of the contract should be 
a primary consideration when deciding the 
necessity of a service contract. In general, 
however, Hooley suggests service contracts 
should be considered for enterprise serv- 
ers, storage, networking, post-warranty and 
EOL/EOS equipment. 

Adam Kaplan, principal and chief technol- 
ogy officer at AE Technology Group (www 
.aetechgroup.com), says that equipment you 
can't afford having go down for any amount 
of time needs to have a service contract. 

"With managed services, it's not only 
important that ... the customer make a com- 
mitment to the relationship, but the vendor 
does, too." That enables the overall goal of 
the relationship, where the business functions 
are as efficient as possible with as little down- 
time as possible, Kaplan says. Plus, it allows 
the customer to focus on jobs they do best. 

Service Contract vs. IVIore Staff 

The point of the service contract, the 
experts agree, is to cover expertise and ser- 
vices that aren't available within the enter- 
prise. So, with that in mind, would it make 
more sense to go with the service contract or 
hire staff to cover that necessary expertise? 

Cost comparisons will vary depending 
on the equipment, contract management 
cost, overall infrastructure, and core busi- 
ness function, says Vines. 



"When a customer is supported by an authorized 
Independent Service Maintenance Organization Partner, 
they experience the benefit of customized service level 
agreements and a customized service savings plan." 



- ServiceKey's Gina Hooley 

and 300 hard drives at any given time. He 
says his company received notification of 
a failing drive at least once a month. When 
he gets that error notification, by having the 
service contract, he can call the manufacturer 
and get the problem taken care of. "From 
my perspective as a consumer, we can't live 
without service contracts," he adds. "We look 
at every penny we spend, just like any small 
business, but we feel service contracts are a 
critical part of the support." 

Herron recognizes that service con- 
tracts cost money, and he says it is money 
well spent to keep his business running. 
Godfrey Nolan, president and founder 
of RIIS (www.riis.com), an application 
development firm, points out that com- 
panies should consider a service contract 
only if the price point makes sense. 

"If we're buying a computer for $1,000 
and the service contract is $300, then finan- 
cially, it doesn't make sense for us," Nolan 
says. "The average life of a computer 
is three years before it gets replaced. 
The warranty is a year, so paying for a 



classified as EOL or EOS, are experienc- 
ing warranty expirations, and are looking 
to cut maintenance costs by consolidat- 
ing multivendor contracts, according to 
Angela Vines, president of ServiceKey 
(www.servicekeytss.com). 

"When a customer is supported by an 
authorized Independent Service Maintenance 
Organization Partner, they experience the 
benefit of customized service-level agree- 
ments and a customized service savings 
plan," adds Gina Hooley, channel marketing 
manager at ServiceKey. "Additionally, they 
are able to preserve the life of their capital 
investment and network infrastructure." 



Herron explains that some compa- 
nies, especially small companies, would be 
inclined to hire a generahst. "Generalists can't 
fix everything. Sooner or later you are going 
to need an expert. A maintenance contract is 
much cheaper." 

To put it simply, a service contract can be 
compared to an insurance plan, says Hooley. 
If you insure your IT equipment with guaran- 
teed service levels, you wiU realize the most 
cost-effective way to preserve your invest- 
ments. "Through an authorized ISMO part- 
ner, customers typically experience a savings 
of 50% or more off manufacturer service 
contracts," she says. 



When Service Contracts Make Sense 

Service contracts are not going to be the right solution for every situation. However, 
Godfrey Nolan, president and founder of RIIS (www.riis.com), believes there are two 
situations when purchasing the service contract that make the most business sense. 
The first, he says, is when there are currently no technical people as part of the staff. 
"Secondly, I think it makes sense when it's very difficult to fix the item and the only 
option is to replace it, such as for cell phones and video displays," he adds. 
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HOW TO 



Deploy A New OS 



Prepare For Painless Installations 



by Bruce Gain 
• • • 

Deploying a new operating system in 

an enterprise is hardly a simple process. OS 
deployment involves careful planning, exe- 
cution, and follow-up. But if you are tasked 
with installing a new OS for workstations or 
servers, there are specific steps you can fol- 
low for a successful deployment. 

Take An Inventory 

The first step when deploying an OS is to 
take inventory of the software and hardware 
in place to check for potential compatibil- 
ity issues with the new OS. Now is the time 
to assess whether certain applications might 
require an upgrade to run on the new OS. 

"Once you have an inventory of all of the 
software, then you have a better understand- 
ing of what wUl work with the new operat- 
ing system and what needs to be replaced or 
upgraded," says Michael Silver, a vice presi- 
dent and research director at Gartner. 

When installing Windows 7, for example, 
Internet Explorer 6 or Internet Explorer 7 is 
not compatible. "Since Internet Explorer 8 
is part of Windows 7, you really do not have 
the option of installing an older version of 
Internet Explorer," Silver says. 

Now is also the time to assess the impor- 
tance of certain applications. Oftentimes, it is 
better to not port an existing application over 
to the new OS. "When doing the inventory, 
you want to sUm down the list and get rid of 
appUcations that are not used very often, are 
duplicative, are not really needed, or that you 
can replace with another better product that 
the new OS supports," Silver says. 

Hardware compatibility is important, as 
well. The CPU, memory, graphics card, 
and other components must be able to han- 
dle the new OS as well as future updates 
and patches. Clive Longbottom, service 
director for business processes facilitation 
at Quocirca, says, "You need to ensure that 
target hardware can take the patches and 
upgrades while providing the capability to 
roll back elegantly if anything goes wrong." 

It may turn out that it is more viable to 
replace older machines when assessing hard- 
ware compatibility. Roger L. Kay, founder 
and president of Endpoint Technologies 
Associates, says, "If the hardware is up to 
the job — that is, if it's relatively new — then 
you can undertake an OS upgrade, using 



TOP TIPS 



deployment tools. Otherwise, it may be 
prudent to swap out hardware, the OS, and 
application software all at once, after exten- 
sive testing in a bench setting, of course." 

Get Automated 

Not too long ago, OS deployment involved 
manually inserting startup diskettes, making 
menu choices when prompted, and install- 
ing the necessary driver when completed. 
Manual installations were especially cumber- 
some when someone had to spend almost an 
hour installing the OS on each PC or server. 
Today, the use of automated tools is the meth- 
od of choice for large-scale OS deployment. 

"Once a company gets above a certain 
size, and 750 to 1,000 users are well into that 
range, then it doesn't pay to go around and 
do manual installs, which depend on labor 
and visits to the end-user sites," Kay says. 

Some experienced IT professionals might 
be wary of automated tools for OS deploy- 
ment because such tools have been difficult 
to use in the past, regardless of the devel- 
oper. However, automated tools are much 
easier to use than they were a few years 
ago, Longbottom says. "The current level 
of automated deployment tools are far bet- 
ter than the last generation," he says. "They 
are really making great strides." 

The beauty of automated deployment 
tools is being able to perform a single 
install for many PCs or servers at once 
with the ability to also manage configu- 
ration files remotely for the machines. 
Automation simplifies the process because 
it lets you create a single clone or "golden" 
OS image, Longbottom says. 

"By keeping it as simple as possible, you 
remove the weak links of having lots of 
images around and needing to keep each 
one patched and updated," Longbottom 
says. "A golden image is one where it is the 
root for everything, so if you have just the 
one image of Windows or Linux or what- 
ever, then that is the only one that needs to 
be patched and updated. Every live image 
is built from this golden image, so it will 
always be at the latest patch level." 

However, for workstation OS deploy- 
ments, users in different departments will 
require different subsets of applications 
and drivers to install on top of an operating 
system. "Most users will have applications 
that are not included in the base image. The 



A new operating system 
often means that users 
and the IT staffers who 
support them must deal 
with a completely new 
interface and might 
require training to use it. 
"You need to determine 
how you will train users 
and the IT staff," says 
IVIichael Silver, a vice 
president and research 
director at Gartner. 
"You also need to have 
a communications plan 
in place to let users 
know what is going on 
before, during, and af- 
ter deployment." 



It is also a good Idea to 
have extra help desk 
support in place, Silver 
says. "You might have 
someone walking the 
halls after the migration, 
who offers extra support 
to avoid having users call 
the helpdesk," he says. 

Installing an OS costs 
less than buying a new 
machine with the new 
operating system already 
installed, of course. But 
the convenience factor 
and the added value that 
a new machine might offer 
need to be considered. 



"It's not cheaper to buy 
new, but it is easier," says 
Roger L. Kay, founder 
and president of Endpoint 
Technologies Associates. 
"There are also fewer 
compatibility issues." 

OS deployment will 
mean downtime, so plan 
accordingly, especially 
for servers. "Servers 
require shorter down- 
time windows, so you 
often need to think about 
how you are going to 
supply a certain ser- 
vice while the server is 
down," Silver says. 



Key Points 



Before upgrading the operating system, 
take a thorough inventory of all the 
machines and applications to check for 
potential compatibility issues. 

Automated tools are worth the invest- 
ment, especially when deploying a single 
OS on many PCs or sen/ers. 

Have a fallback plan in place in case the 
deployment is not successful so that PC or 
server applications can be rapidly restored. 



base image includes applications that every 
user needs, such as office applications or 
antimalware applications," Gartner's Silver 
says. "Then users in different departments 
often require a subset of basic applications, 
specific to their department, whether in 
marketing and sales or legal." 

John Matzek, CEO of Logic IT Consulting, 
says that for the full-scale deployment of 
an OS on several hundred machines, it is a 
good idea to do a test first. Matzek recom- 
mends installing the OS on 10 or so machines 
from a single console to see how they work 
before full deployment. "You get a feel for 
some common issues, and you can be more 



' proactive," Matzek says. "You do a handful, 
then do a ton." 

The Investment 

Other than the licensing costs associated 
with switching to a new operating system, 
OS deployment usually does not require a 
major investment. In fact, the adoption of 
single-image OS deployment tools signifi- 
cantly reduces costs while boosting efficien- 
cies, Longbottom says. "Technical benefits 
include less time spent in root-cause analysis 
and in curing any issues, fewer problems with 
trying to support systems that are at different 
patch levels, and better utilization of avail- 
able resources," Longbottom says. "Business 
benefits include better systems availability 
cind overall uptime, as well as better systems 
utilization resulting in less expense on the IT 
platform as well as less energy costs." 

But suppose the new OS does not work 
like it should, causing workstation or serv- 
er downtime and interruptions in business 
processes. As a remedy, automated tools 
should be in place to rapidly restore origi- 
nal applications and data to the machines 
so that they can run like they did prior to 
the installation of the new OS. "You have 
to ask yourself what happens if you do 
the upgrade and then users no longer have 
access to the applications they need," Silver 
says. "The answer is that the machines' 
data, applications, and settings must be 
backed up and ready to redeploy." 

However, a rollback should be your last 
option, Matzek says. "You want to see how 
you can make it work and try to resolve the 
issues first, because if you roll it back, you 
will have to redeploy again anyway." 



GreenSQL Enterprise Edition 



NEW PRODUCT 



by Blaine Flamig 



The Unified Approach 
To SQL Database 
Server Security 

"Unique," "novel," and "innovative." All 
aptly describe GreenSQL' s new Enterprise 
Edition for SQL database servers. 
"Intelligent," "comprehensive," and "cost- 
effective" also apply to Enterprise Edition 
and its all-in-one UDS (Unified Database 
Security) approach for securing database 
servers while bettering performance. 

Operating as a front-end that fully hides 
a database, the software -based GreenSQL 
Enterprise Edition combines security, 
caching, auditing, and masking modules in 
one package that easily and quickly installs 
on MySQL, PostgreSQL, and Microsoft 
SQL servers (Oracle server support is 
coming), as well as on a dedicated server 
shielding multiple databases, virtual appli- 
ance, or Web or application server. 

Beyond thwarting real-time intemal and 
extemal threats, the security module offers a 
rule-based engine supporting virtual patch- 
ing to guard against new exploits. Intrusion 
detection and prevention support blocks 
attacks from hackers, end users, and privi- 
leged users attempting unauthorized access. 

The caching module uses patented tech- 
nology to help establish a caching policy 
configurable per proxy, database, table, and 
specific query to aid in cutting bandwidth 




GreenSQL Enterprise Edition 

An all-in-one solution for database servers that uses 
GreenSQL's Unified Database Security platform to 
combine security, caching, auditing, and masking 
modules into one software-based package. 

usage, improving hit results, and reducing 
network latency. All this occurs without 
changes to applications or the database. 

Coupled with an advanced auditing 
option, the database activity monitoring 
module enables enacting auditing policies 
at the database, table, and column level. 
Other features include before-and-after 
viewing of changes and who made them; 
advanced reports; email alerts; and the 
means to display compliance policies. 

GreenSQL Enterprise Edition's mask- 
ing module enables real-time cloaking of 
sensitive data so that only approved data 
is exposed. Support for masking data per 
application, user, source IP, and column is 
included, as is support for request-based 
policies that ensure masked data is created 
in real time and not stored on the database. 



EEnspL 



+ 972 (3) 688-8090 
www.greensql.com 
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Data Center Cleaning Services 



Controlled Contamination 
Services 

m 



^CONTROLLED 



Specializing in worl<ing with data centers of all sizes, 
Controlled Contamination Services can clean the most 
sensitive components to rid your data center of fine 
particles, residue buildup, and other contaminants. 
Professionals will clean server rooms with the latest 
micro-cleaning techniques. Controlled Contamination 
Services performs background checks on its own 
employees to ensure that your facilities and equipment 
are in the right hands. 

• Sen/ices for UPS rooms, computer rooms, and network 
control centers 

• Proper cleaning materials reduce electrostatic charges 
and protect sensitive environments 

• Cleaning services also disinfect raised floor areas and 
command centers 

• Removes dust that air filters can't catch 

Best For: Data centers with sensitive equipment that 
needs cleaning. 



Data Clean 



For more than 30 years. Data Clean has been trusted by 
thousands of controlled environments worldwide. Data 
Clean specializes in maintenance and the identification, 
cleaning, and remediation of contamination that costs 
you where it counts: reduced productivity, customer sat- 
isfaction, downtime, and lost revenue. 

• Specializes in controlled environments: data centers, 
computer rooms, and cleanrooms 

• Full-service branches located in the United States, 
Canada, Mexico, Saudi Arabia, and Asia 

• Flexible scheduling 24/7 

• Dedicated workforce of highly trained and uniformed 
technicians 

• 1 00% satisfaction guarantee 

Best For: Data centers that demand detail-oriented 
cleaning, regular maintenance, and post-construc- 
tion cleaning. 



Data-Tec Systems 



TA^TEC SYSTEMS 



Data-Tec Systems specializes in servicing a variety of 
IT-related facilities, including computer rooms, server 
rooms, print facilities, MDF rooms, item processing 
rooms, and even general office areas on raised flooring. 
Data-Tec Systems has been providing maintenance 
services since 1991 and can care for equipment, tile, 
subfloor, and access floor cleaning as a complete 
package. Data-Tec Systems employs trained techni- 
cians who know how to manage delicate IT equipment 
while cleaning data center rooms. 

• Periodic computer room exterior shell cleaning 

• Access floor tile surface cleaning with pretreated, 
environmentally safe cleaners 

• Subfloor tack cloth wipe-down 

• Access floor installation and replacement 

Best For: Data centers that utilize multiple rooms. 



ProSource 

Mission Critical Services 

ProSource. 

MISSION CRITICAL SERVICES 



ProSource offers mission-critical data center cleaning 
services that consist of multitier, time-sequenced preven- 
tive maintenance plans for cleaning the data center's 
subfloor, raised floor, equipment surfaces, and ceiling 
areas. ProSource also offers subfloor encapsulation that 
includes an epoxy coating application to prevent subfloor 
plenum dust. Additionally, ProSource offers many prod- 
ucts to help prevent contamination and static build-up 
in the data center, such as contamination control sticky 
mats, bypass airflow grommets and blanking panels, 
antistatic cleaning chemicals, and raised floor supplies. 

• Standard sen/ice options include annual, semi-annual, 
quarterly, and monthly preventive maintenance 
service plans 

• Customized plans are available to meet the specific 
needs of individual facilities 

• Raised floor surface cleaning features Pro-Tek and 
Microfiber Flat Mopping System 



Seaico 



SeaIco specializes in cleaning and maintaining com- 
puter rooms and their support equipment. Whether it's 
post-construction cleaning or a preventive maintenance 
program, Sealco's services will allow your data center to 
meet today's environmental needs at an affordable price. 
Acknowledging the customer's concern for safety and 
security, all Seaico technicians receive extensive back- 
ground checks and training in data center operations. 

• 26 years in the data center cleaning industry 

• Permanent full-time employees are background- 
checked and drug-tested both before and during 
employment 

• AirSeal bypass airflow programs designed to de- 
crease energy consumption and increase infrastruc- 
ture capacity 

• Full line of computer room products 

• Zinc whisker remediation 

• Nationwide sen/ices 



SPEC-CLEAN 



spec-cean. 



SPEC-CLEAN provides continuous maintenance pro- 
grams and post-construction specialized cleaning that 
are based on the needs of your data center or critical 
environment with flexible scheduling and full-time trained 
technicians. SPEC-CLEAN sen/ices include exterior 
and interior hardware cleaning, HEPA vacuuming of the 
sub-floor, and reconditioning the surface of raised floor 
and non-raised floor environments. The company also 
provides environmental follow-up site reports, emergen- 
cy cleaning, and zinc whisker remediation. 

• Complete cleaning of exterior and interior of server 
cabinets 

• HEPA vacuuming takes care of dust on exterior 
cabinets, monitors, and flat surfaces 

• Client walk-throughs to ensure that you're 1 00% 
satisfied 

• Cleaning solutions used are approved for data cen- 
ters and mission-critical environments 



Product 



Description 



Product 



Description 



Best For: Data centers that desire to prevent the 
accumulation of dust and contamination that can 
cause unwanted downtime. 



Best For: Any IT environment that needs cleaning 
services performed on any scale. 



Best For: Data center managers in search of reliable, 
detail-oriented deep cleaning. 
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Processofs Product Spotlight highlights options available in key data center product categories, providing product information side-by-side for easy comparison. 

Compiled by Rod Scher 



GCA Services Group 



SERVICES GROUP"" 

GCA Services Group does more than simply clean your 
data center; it offers a host of facility maintenance pro- 
grams suited for the needs of individual data centers. 
GCA Services also offers custom Green Cleaning to 
ensure the health and safety of occupants while ensur- 
ing that it uses the most environmentally friendly meth- 
ods available. 

• Services adhere to cGMP techniques, EST Federal 
Standards, and ISO Cleanroom Operations Standards 

• Maintains bio-pharmaceutical, semiconductor, aero- 
space, bio-safety, chemical, defense, nanotechnology, 
and optics environments 

• Sterile environment cleaning includes decontamina- 
tion, disinfection, gown room management, lab support 
services, and more 

• The Green Cleaning program provides custodial 
effectiveness assessments, sustainable cleaning 
processes, and certified sustainable chemicals while 
complying with GREENGUARD and offering Green 
Seal-compliant products 

Best For: Environmentally conscious data centers. 



Plenum Cleaning Services 



aEPxenum 
xeaniriG service/ 



Plenum Cleaning Services cleans data centers, telecom 
centers, and MDF and IDF rooms, as well as power/ 
electrical rooms in accordance with ISO 14644 standards 
without introducing any liquids or scrubbing machines that 
require liquid. Plenum Cleaning Services can customize a 
data center cleaning program to meet your business and 
budgetary needs. Available services include cleaning of 
plenums, access floor tiles (all sides), access floor frames, 
vinyl composition tile floors (strip and wax), hardware, 
equipment, cages, fences, overhead cable trays, lights, 
furniture, and wall fixtures. Plenum Cleaning Services also 
offers post data center construction cleaning. 

• Improves the static dissipation properties and prolongs 
the condition of the high-pressure laminate access floor 

• Lowers cooling costs by reducing the air density and 
improves the air quality by removing 99.999% of dust, 
pollen, mold, bacteria, and any airborne particles with a 
size of 0.12 micron or larger 

• Prolongs the lifetime of hardware and equipment by 
maintaining optimal operating conditions, including air- 
flow and temperature 

• Improves aesthetics 

• Provides unsurpassed sen/ice and offers a 100% 
customer satisfaction guarantee 

• References available with written estimate 

Best For: Preventing costly downtime related to thermal 
shutdown as a result of components overheating due to 
dust and debris buildup. 



Specialty Cleaning Services 




Sterile Environment 
Technologies 




XrUw Enifiranm*nt\ 



Specialty Cleaning Services can effectively clean data 
centers, while also taking care of cleanroom, industrial 
lighting, acoustical ceiling tile, and post-construction 
cleaning. Offering five basic services. Specialty Cleaning 
Sen/ices uses HEPA-filtered vacuums, lint-free dust 
cloths, and sterile cleaning agents to complete commer- 
cial cleaning tasks such as exterior hardware cleaning, 
top-of-floor cleaning, underfloor plenum cleaning, above- 
ceiling cleaning, air sampling, and environmental reports. 

• Heavy-duty cleaning for post-construction facilities 

• Cleanroom sanitation for large facilities 

• Water-based, nontoxic cleaning materials for 
acoustical ceiling tile 

• Services are available for scheduled intervals 
throughout the year 

Best For: Data centers that want detailed, hands-on 
professional cleaning services. 



Sterile Environment Technologies is a national leader 
in data center cleaning that brings cleanroom-level 
protocols to data centers, computer rooms, server 
farms, and other sensitive critical and high-tech envi- 
ronments. SETS can clean data centers of all sizes 
that require cooling efficiency, maximum uptime, 
and healthy air for employees. In addition, Sterile 
Environment Technologies is a highly sought-after 
consulting and services firm that can audit your facil- 
ity's needs and provide specific services such as belt 
debris, zinc needle, and Halon/FM200 remediation 
services; onsite interior electronics/tape/motherboard 
decontamination; antistatic subfloor surface sealing; 
and tacky mat provisioning. 

• Provides cleaning services for subfloors, server 
cabinets, racking, access floors, antistatic wax 
surfaces, open ceilings, ceiling plenums, and more 

• Highly trained and experienced managers and 
technicians 

• Cleanroom-approved chemicals and equipment to 
ensure the long-term safety and health of your 
environment 

Best For: All critical environments that follow Federal 
209E and ISO 14644 standards. 
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The Price Of Certification 



As Prices Increase For Certain Exams, Is It Worth The Cost? 



by Elizabeth Millard 

Microsoft's recent announce- 
ment that it would raise the price for 
certain certification exams — from $125 
to $150, in many cases — reignites the 
ongoing conversation in the IT industry 
about the value of certifications, espe- 
cially because other vendors tend to fol- 
low Microsoft's lead. 

Microsoft's Move 

Not every exam is slated for a price 
increase (see sidebar), but many of the top 
certification exams will now cost more as 
of July 1. The price increase is the first 
in nine years and reflects the company's 
investment and improvement in certi- 
fication programs, according to Julie 
Robertson, a spokesperson for Microsoft. 
She notes that the price increase allows 
"continual reinvestment in new and 
enhanced certifications, exams, and pro- 
gram improvements." 

Microsoft has the largest IT certi- 
fication program in the world, deliver- 
ing more than 2 million exams per year. 
Robertson adds that research has shown 
that the loyalty of certification customers 



to the program has remained strong over 
the last five years. 

It will take time to see the effects 
of the price increase; it's possible that 
some companies that pay for employee 
certification exams will limit the num- 
ber allowed or even stop paying alto- 
gether. This will likely affect Microsoft 
partner companies less, however, 
because the company requires that its 
partners maintain a specific number of 
certified engineers on staff. 

In general, Microsoft focuses strongly 
on certifications and training for its part- 
ner companies, and this could get intensi- 
fied in the future. Curt Wheadon, global 
vice president of the Microsoft practice 
at Dimension Data (www.dimensiondata 
.com), notes that Microsoft has moved 
to more on-demand training to accom- 
modate the firm's staff: "They seem to be 
actively working to anticipate where our 
staff needs skills. Microsoft also seems 
to stress certification as something that 
they care about as well as something their 
clients should care about, which drives 
demand from partners and IT teams." 

For larger partners, Microsoft has 
even invested in training consultants 



PROCESSOR 



Subscribe 
Today! 

Call (800) 334-7458 



Subscribe 
Online! 



Go to www.processor.com 



Processor Is the industry's 
most comprehensive 
source for: 



>• Snapshots of new data center and IT 

hardware and software 
>• Rundowns of major industry news 

► Information on manufacturers 
and resellers 

> Tips, strategies, and advice 
from experts in the field 




whose job is to make sure that the orga- 
nizations are aware of training and cer- 
tification opportunities, Wheadon adds. 

Proof Of Knowledge 

Whether certifications are necessary in the 
current IT cUmate is a question that's more 
complicated than it seems. Some believe that 
demonstrable experience is more important, 
while others think that certifications prove a 
level of knowledge that's difficult to show 
in any other way. For many hiring manag- 
ers, a mix of both is ideal, but the particular 
blend depends on an individual rather than 
an industry-accepted standard. 

"In this economy, certifications defi- 
nitely provide an edge when it comes to 
job hunting and competing for an inter- 
view," says Saeer Butt, a senior soft- 
ware architect at Zaphyr Technologies 
(www.zaphyr.net) and a Microsoft 
certified DBA, systems engineer, and 
solution developer. "In an unregulat- 
ed industry such as IT, certifications 
are the only proof that a person knows 
what he claims." 

Butt believes that certifications are 
becoming more important in the IT 
world, especially because there are so 
many newer technologies such as cloud 
computing. Certified engineers can get 
first dibs on new projects, he notes. 

"Certifications serve a variety of 
roles both to individuals and organiza- 
tions," adds Wheadon. 

Mixed Feelings 

Although certifications can provide 
a base of competency for some, others 
prefer to lean more toward the "experi- 
ence" side of the mix. 

Dave Hatter, owner of Libertas Tech- 
nologies (www.libertastechnologies.com), 
is currently in the process of studying for 
the MCDBA (Microsoft Certified Database 
Administrator) certification, but he believes 
that there are "too many paper certs" and 
that certifications aren't as valuable as 
demonstrable experience. He also thinks 
certifications aren't as valuable as they 
once were. 

"I'm not against certifications, but I'm 
also not a huge proponent," he says. 
"I've taken lots of these tests, and some 
are difficult while others are easy. They 



Key Points 



Microsoft is raising the price of certain 
certification exams, which could have 
an effect on other certification providers 
and IT professionals. 

Some experts believe that certifications 
are becoming more important in the IT 
world because there are so many newer 
technologies such as cloud computing. 

When hiring, many in the IT industry 
feel that experience is more important 
than certifications, but others appreci- 
ate certs for their ability to prove a level 
of knowledge. 



seem to be all over the place. It's true 
that I learn something new every time 
I study for these tests, but I also forget 
that knowledge if I don't use it." 

When hiring, Hatter pays much more 
attention to experience than certifica- 
tions, he says. He'll also give candidates 
tests on areas such as troubleshooting and 
technical skills in order to determine their 
knowledge levels. 

Also, for some in the industry, get- 
ting certifications isn't as much about 
choice as it is about time. Wheadon 
says, "Many of the best engineers have 
outdated certifications because they are 
so busy delivering projects that they 
don't have the time to go through for- 
mal certification processes and rely 
instead on hands-on experience and on- 
demand training." 

Looking Aliead 

It's unlikely that a small price shift 
by Microsoft will cause widespread 
changes in the certification industry, but 
it could cause many IT departments to 
look at the specifics of what they need. 

In the near future, look for increased 
demand for certifications from many 
other vendors and changes in certifi- 
cation content, predicts Wheadon. He 
says, "The demand for cross-domain 
expertise and genuine IT architects has 
risen, and certifications have changed 
with them." ^ 



Slated For A Price Increase 

These exams are scheduled for the price boost: 

• MCTS Microsoft Certified Technology Specialist 

• MCITP Microsoft Certified IT Professional 

• MCPD Microsoft Certified Professional Developer 

• MCDST Microsoft Certified Desktop Support Technician 

• MCSA Microsoft Certified Systems Administrator 

• MCSE Microsoft Certified Systems Engineer 

• MCAD Microsoft Certified Application Developer 

• MCSD Microsoft Certified Solution Developer 

• MSDBA Microsoft Certified Database Administrator 

Microsoft Learning (www.microsoftlearning.com) does not anticipate that this price increase will 
impact MCM (Microsoft Certified Master), MCA (Microsoft Certified Architect), MTA (Microsoft 
Technology Associate), and MOS (Microsoft Office Specialist) certification exams. 
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DATA CENTER MANAGEMENT 



USED & REFURBISHED EQUIPMENT SPOTLIGHT 



Used Tape Media 

With A Reputable Vendor & Careful Handling, 
Used Tape Can Be Almost As Good As New 



by Cynthia Harvey 

If your company still uses tape media 
for backup and archiving, you may be able 
to save 20 to 50% by purchasing certified 
used media. For example, according to 
DTC Computer Supplies, you might pay 
$22 for new LTO-1 media, but certified 
used LTO-1 tape retails for about $16. 
And while new 9940 cartridges retail for 
$79, certified used cartridges cost only 
$39. For enterprises that purchase thou- 
sands of tapes at a time, those savings can 
really add up. 

In addition, reusing digital tape is good 
for the planet. The other alternative — 
grinding up tapes and sending them to 
the landfill — can introduce chemical con- 
taminants into the environment. 

If you're considering purchasing used 
media, experts offer several tips to ease 
the buying process and maximize the 
life of used tape. 

Get past the fear. Tape manufactur- 
ers work hard to convince their cus- 
tomers not to buy used tape, but used 
tape vendors say that those warnings 
are nothing more than fear mongering 
designed to increase manufacturers' 
sales. In fact, says Norm Hutton, director 



of sales for DTC Computer Supplies 
(www.dtcl.com), "The return rate on our 
certified media is no higher than it is 
on new." 

Most tapes are designed to withstand 
thousands of mounts in a tape drive. 
However, many tapes are written to just 
once and then sit on a shelf for years 
before companies are ready to dispose of 
them. These cartridges have a lot of use- 
ful life left. 

According to certified tape vendors, 
once they get past their initial fear, 
many first-time used tape purchasers 
become repeat customers. 

Ask the right questions. If you decide 
you would like to give certified media a 
try, experts say you need to make sure 
you're dealing with a reputable vendor. 
How can you tell? You can start by find- 
ing out how long the company has been 
in business and asking about their defect 
rate and return rate. Hutton recommends 
asking how the vendor is eradicating the 
data, how it tests the tape, and what its 
warranty is like. 

Vendor e-Mediaplus (www.e-media 
plus.com) also suggests that you ask 
whether certification test results are 
available for the tape media and what 



kind of return policy the vendor has for 
defective media. You should also ask for 
and check customer references. 

Reputable vendors have good warran- 
ties (10 years or more) and simple return 
procedures, and they can verify that they 
erase 100% of the data on a tape before 
it is certified for reuse. 

Follow good tape-handling proce- 
dures. Certified used tape can be used 
for the same applications as new tape, 
and it doesn't require any special han- 
dling procedures. However, you should 
treat it with the same care that you 
would treat new media. 



Additionally, tape manufacturers and 
resellers generally recommend that you 
store tapes vertically and never take 
apart the cartridges or touch the media 
with your bare fingers. In addition, you 
should avoid dropping the tapes and 
keep them well away from magnetic 
devices, including monitors, speakers, 
electrical motors, and power supplies. 
Finally, you shouldn't let your tapes get 
too cold or too hot, and when you move 
them from one place to another, you 
should wait 24 hours to let them adjust 
to the climate conditions before mount- 
ing the tapes. _ 



Find Used & Refurbislied Equipment 

For Sale 

Once you've made the decision to purcliase used or refurbished equipment, finding the equipment 
you need is easy with Processoi's online Data Center Products For Sale Database. 



From Processor's home page (www.processor.com), you can search for a specific part number, 
mal<e, model, or description. Enter the information in the 
appropriate box and clicl< Search. You'll see a list of available 
equipment, if you don't see the particular piece you're looking for, 
scroll to the bottom of the search results page to conduct a more 
detailed search. There, you can search by part number, model, 
price, location, and more. 

Don't l<now the specific part number or model? Use 
the drill-down search on the Processor home page 
to view results from specific manufacturers. Simply 
clicl< the manufacturer name, and you'll see a list of 
all equipment listings from that manufacturer. 




Pegasus Buys, Sells and Offers Depot Maintenance 
& Flat Rate Repair On: 

Kronos Time Clocks, Flat Panels, 
POS & Symbol, HHP, PSC, Telxon, 
Metrologic, Barcoding Equip 



Infopmation 
Technology 
Trading 



Experience to find you tlie 
rigfit tecfinology solution. 

AS/400 • RS/6000 • Sun Microsystems 
Storage "Tape Backup 



(877)715-3686 | www.itechtrading.com 




Thanks to DMD, we 
don't have to sit on 
our old computer 
equipment anymore. 



retrieve - refurbish ■ reuse ■ recycle ■ remarket 
We Purchase: We Offer: 



Computers/Laptops 
Networking Equipment 
Power/Environmental 
Tslecommunications 
Complete Data Centers 
Printers 



Asset Tracl<ing/Reporting 
Deinstallation/Packing/Transportation 
DOD Level Data Destruction 
Epa Recycling/Reuse 
Ongoing Support Plans 
Technology Refresh/Install Programs 



At DMD Systems Recovery, we remove the tieadactie from asset 
disposal. We can manage the whole process from deinstallation to 
asset remarketing. We worry about data destruction, EPA 
regulations, logistics, and insurance so that you don't have too. 
Don't tie up your resources or take chances with you data or 
environmental issues. Call DMD today. 



DMD SYSTEMS RECOVERY. IMC. 

T Jl F <B77|.7I7'bk1'i'' Ph '''''"m^Mt'd'm™^ (IK! 307 Dlfll 

providing QUALITY QOODS and SEHVICES lor Induslry. 

MTtinbwMAhCgM.IMtWbutlriAulfaiW. t^un^lMrCI t^oniiwa KPJWtKrdiMj. 



1^1' 



CASH IN 

YOUR USED 
CELLPHONES 




S 

1 



pacebutler.com will 
pay you up to ^n^6?K 

p code h 



$125 

for each phone! 

We issue your check within 4 days! 
www.pacebutler.com I 



corporation 



1-800-248-5360 



^ MAGNEOT 



Magnext Ltd 

7099 Huntley Rd, Suite 104 | 
Columbus, OH 43229 DATA BACKUP SOLUTIONS 



NEW & REFURBISHED AUTOLOADERS & TAPE LIBRARIES 
UPGRADE PACKAGES FOR HIGHER PERFORMANCE & CAPACITY 
TAPE LIBRARY REPAIR SPECIALISTS - STOCK lOOO'S OF PARTS 



y^(i[Ei^[D)[i mm mmm 



LTO • DLT • SDLT 
9840 • 9940 • TIOK 

Magnext stocks tape drive 
modules for your tape library 

Call for best pricing! 

Committed to providing high-value, high-quality, products to the IT marketplace 



Toll-free 888-NOW-TAPE 
www.magnext.com 



614-433-0011 
info(S)nnagnext.com 



We can supply any configuraton you 
need. If you have clocks installed and 
need a specific KOS version we can 
help you. Same is true on I/O Boards. 

Specialize in 420G, 440B, 
460F, 480F, 551, and4500's 



Ethernet Daughter Board, Modem Option, 
Remote Readers, Bell Relays, Master Sync, 
Battery Backup Kit, Dual Reader, I/O Board, 
External Reader I/O Board, Touch ID 




Pegasus Computer Marketing, Inc. 

(800) 856-2111 I www.pegasuscomputer.net 



dbg 



DEC-Compaq-Clsco-Sun-SGI 



©mm 



770-931-7732 

Fax 770-931-9416 

www.dbgweb.com 
salesp@dbgweb.com 



AlphaServer GS160 Model 16 

Base System for OpenVMS 

• DY-160CG-AA 

• One Alpha 21264 Processor 1224 MHz 

• Four Quad Building Blocks 

• One 14-Slot PCI Shelf 

• OpenVMS Operating System License 

ALSO AVAILABLE: 

• Additional 1224 MHz CPU w/SMP 

• Additional Memory 

• Additional PCI Shelves 

• Additional PCI Options 



2 Systems In Stock! 



Authorized COflTPACt Reseller 
WE WILL BUY YOUR USED HARDWARE! 
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Upcoming IT Events 



Network With Your Peers 
At These IT Training & Association iUeetings 

Across The United States 



JULY 

Central Plains ISSA 

July 1, 1 p.m. 
Wichita IVIarriott Restaurant 
9100 E. Corporate Hills Drive 

Wichita, Kan. 
issa-cp.org 



Data Connectors 
Toronto 

July 7 
Hyatt Regency Toronto 
370 King St. West 
Toronto, Ontario 
www.dataconnectors.com 
/events/201 1/07Toronto/agenda.asp 



Configuring 
Windows Server 2008 Active 
Directory Domain Services 

July 11-15, 6 p.m. 
Online Live 
www.nhnorthflorida.com 



AITP 

Research Triangle Park 

July 14 
University Club 
4200 Hillsboro St. 

Raleigh, N.C. 
www.rtp-aitp.org 



Data Connectors 
Hartford Tech-Security 
Conference 

July 14 
Crowne Plaza Hotel 
100 Berlin Road 
Cromwell, Conn. 
www.dataconnectors.com 
/events/201 1/07Hartford/inv_ex.asp 



AITP 

Oklahoma City 

July 19 
aitpokc.org 



AITP 

Southwest Missouri 

July 19 
aitpspringfield.org 

Cloud Control Conference 

July 19-21 
Hilton Boston Logan Airport 
Boston, Mass. 
www.cloudcontrolconference.com 

Green Data Center 
Conference 

July 19 
Hilton Boston Logan Airport 
Boston, Mass. 
www.greendatacenter 
conference.com 



ISSA 
Northern Virginia 

July 19, 5:30 p.m. 
issa-nova.org 



Search Optimization Series: 
Pay Per Click 
Search Marketing 

July 20, 10 to 11:30 a.m. 
New Horizons Cincinnati 
10653 Tech woods Circle 
Cincinnati, Ohio 
tinyurl.com/nhcincinnati06-29 

Data Connectors 
Portland Tech-Security 
Conference 

July 21 
Doubletree Hotel Portland 
1000 NE Multnomah St. 

Portland, Ore. 
www.dataconnectors.com 
/events/201 1 /07Portland 
/inv_ex.asp 



AUGUST 

Data Connectors 
Denver Tech-Security 
Conference 

Aug. 4 
Denver, Colo. 
www.dataconnectors.com 
/events/201 1/08Denver/agenda.asp 



Central Plains 
ISSA 

Aug. 5, 1 p.m. 
Wichita Marriott Restaurant 
9100 E. Corporate Hills Drive 

Wichita, Kan. 
issa-cp.org 



AITP 

Research Triangle Park 

Aug. 11 
University Club 
4200 Hillsboro St. 

Raleigh, N.C. 
www.rtp-aitp.org 



Data Connectors 
St. Louis 
Tech-Security Conference 

Doubletree Hotel & Conference 
Center 

16625 S. Swingley Ridge Road 
Chesterfield, Mo. 
www.dataconnectors.com 
/events/201 1/08StLouis/inv_ex.asp 

AITP 
Oklahoma City 

Aug. 16 
aitpokc.org 



AITP 

Southwest Missouri 

Aug. 16 
aitpspringfield.org 

ISSA Northern Virginia 

Aug. 18, 5:30 p.m. 
issa-nova.org 



AITP St. Louis 

Aug. 25, 5:30 p.m. 
Crowne Plaza Clayton 
7750 Carondelet Ave. 
St. Louis, Mo. 
stlouisaitp.org 



Data Connectors 
Pittsburgh Tech-Security 
Conference 

Aug. 25 

Pittsburgh Marriott City Center 
112 Washington Place 
Pittsburgh, Pa. 
www.dataconnectors.com 
/events/2011/08Pittsburgh/inv_ex.asp 

Search Optimization Series: 
Google Analytics 

Aug. 31, 10 to 11:30 a.m. 
New Horizons Cincinnati 
10653 Techwoods Circle 
Cincinnati, Ohio 
tinyurl.com/nhcincinnati06-29 



SEPTEMBER 

Central Plains ISSA 

Sept. 2, 1 p.m. 
Wichita Marriott Restaurant 
9100 E. Corporate Hills Drive 
Wichita, Kan. 
issa-cp.org 



AITP 

Research Triangle Park 

Sept. 8 
University Club 
4200 Hillsboro St. 

Raleigh, N.C. 
www.rtp-aitp.org 



Data Connectors Dallas 
Tech-Security Conference 

Sept. 8 

CHG Cityplace Conference Center 
2711 N. Haskell, Suite 100 

Dallas, Texas 
www.dataconnectors.com 

/events/2011/09dallas/inv_ex.asp 



Data Center World 

Sept. 11 to 14 
Orlando World Center Marriott 
Orlando, Fla. 
www.datacenterworld.com 



AFCOM Central Texas 

Sept. 15, 11 :30 a.m. to 1 :30 p.m. 
Marie Callender's Restaurant 
9503 Research Blvd. 
Austin, Texas 
www.afcom.com/afcomnew 
/CentralTexas.HTML 

Data Connectors Washington, D.C., 
Tech-Security Conference 

Sept. 15 
Washington, D.C. 
www.dataconnectors.com 
/events/201 1/09WashingtonDC 
/agenda.asp 

ISSA Northern Virginia 

Sept. 15, 5:30 p.m. 
issa-nova.org 

SIM Minnesota 

Sept. 15, 2:30 p.m. 
Northland Inn 
7025 Northland Drive N. 
Minneapolis, Minn. 
www.simnet.org 

AITP Oklahoma City 

Sept. 20 
aitpokc.org 

AITP 

Southwest Missouri 

Sept. 20 
aitpspringfield.org 

AFCOM Central Texas 

Sept. 22, 11 :30 a.m. to 1 :30 p.m. 
Marie Callender's Restaurant 
9503 Research Blvd. 
Austin, Texas 
www.afcom.com/afcomnew 
/CentralTexas.HTML 

AITP St. Louis 

Sept. 22, 5:30 p.m. 
Crowne Plaza Clayton 
7750 Carondelet Ave. 

St. Louis, Mo. 

stlouisaitp.org 



AITP Akron 

Sept. 27 
356 Fighter Group Restaurant 
4919 Mt. Pleasant Road 
North Canton, Ohio 
www.akron-aitp.org/index.htm 



Data Connectors New York 
Tech-Security Conference 

Sept. 29 
Bridgewaters 
11 Fulton St. 
New York, N.Y 
www.dataconnectors.com 
/events/201 1/09NewYork/inv_ex.asp 



Do you have an event you'd like to see listed? 
Send an email to feedback@processor.com. 
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GREEN TECH & TIPS 



The Effect Of Cooling On PUE 

No AC Is The New AC 



BY ROD SCHER 



Although it's an imperfect metric, PUE has nonetheless become the de facto stan- 
dard by which data center efficiency is measured — at least, as a starting point. PUE 
(power usage effectiveness) is derived by dividing the total incoming power (that is, 
the IT load and the data center's electrical and mechanical support systems, includ- 
ing such items as chillers and air conditioners) by the IT equipment load. 



The Uptime Institute posits an indus- 
try average PUE of 2.5. Naturally, 
lower results are better, because they 
indicate that more incoming power is 
consumed by primary IT equipment 
instead of by support equipment. (Note 
also that recent developments in data 
center design and implementation have 
resulted in new data centers with much 
lower average PUEs: Facebook's new 
Pineville, Ore., facility claims a PUE 
of less than 1.5, while Google says that 
the PUE across its data centers aver- 
ages about 1.21.) 

Diagnosing Inefficiency 

What has the greatest negative impact 
on PUE? Most analysts cite cooling as 
the culprit. 

"Typically 50 to 75% of all the con- 
sumed cooling energy is attributed to 
air-conditioning compressors and related 
equipment," says Don Beaty, president 
of DLB Associates (www.dlbassociates 
.com) and first chair of ASHRAE TC 9.9. 

A recent report from the Green Grid 
confirms those numbers. According to 



its calculations, some 45% or so of the 
data center's energy use can be attrib- 
uted directly to cooling, with chillers 
alone accounting for 33% of that. (Such 
"low-hanging fruit" as lighting only 
accounted for about 1% of energy use, 
while even the IT equipment itself used 
only about 30% — a significant amount, 
to be sure, but less than the cooling 
equipment that was installed to miti- 
gate the heat generated by the servers, 
PDUs, and other such equipment in the 
first place.) 

Reducing Your PUE 

Recent ASHRAE recommendations 
for improving a data center's PUE 
(see ASHRAE' s "Green Tips for Data 
Centers") have included optimizing sup- 
ply air temperatures, installing moni- 
toring equipment, improving lighting 
efficiency, optimizing data storage, and 
improving transformer efficiencies. The 
organization points out that many of 
these could be "implemented through 
simple operational changes, upgrades, 
or modifications that require a relatively 



low investment and that cause little dis- 
ruption to the existing operations of the 
IT equipment." 

Of these, by far the most effective 
approach has to do with reducing the 
cooling load, and the best way to do that, 
say experts, is to do away with most air- 
conditioning altogether. "Basically it 
means operating in a compressor-less 
mode of operation," Beaty says. 

And it turns out that this is exactly 
what Google, Amazon, Facebook, and 
other data center energy pioneers have 
in mind. Instead of using traditional AC, 
innovative designers of tomorrow's data 
centers are doing away with compressor- 
driven AC altogether, preferring instead 
to locate and orient their buildings such 
that they can use cool air from outside 
(one reason that Facebook located its 
data center in Oregon) or geothermal 
wells for cooling in geographic 
areas where that is possible. 

Taken by themselves, 
ASHRAE's latest ther- 
mal guidelines (see the 
group's "2011 Thermal 
Guidelines for Data 
Processing Environ- 
ments — Expanded 
Data Center Classes 
and Usage Guidance") 
do much to reduce 



cooling requirements. The group's 2011 
guidelines break data center equipment 
down into six classes, with different cool- 
ing requirements for each, noting that "a 
single data center class forces a single 
optimization, whereas each data center 
needs to be optimized based on the opera- 
tor's own criteria." That said, minimum 
recommended temperatures have been 
raised over the past few years, increasing 
the opportunity for data centers to do away 
with chillers and possibly eliminating 
mechanical cooling systems entirely, in 
order to realize improved PUE ratings. 




Processor Solutions Directory 

Here are brief snapshots of several companies offering products designed for tine data center and IT industry. 

Listings are sorted by category, making it easy for you to find and compare companies 

offering the products and services you need. 

You can find more detailed information on these companies and the products they offer inside this issue. 



To list your company and products, 
call (800) 247-4880. 



Physical Infrastructure 



ACCESS CABLE TRAVS, INC. 



Based in St. Petersburg, Fla., Access Cable Trays has 
been in the access flooring industry for more than a decade. 
The company prides itself on offering affordable access 
flooring solutions under its FloorFlex brand, providing com- 
panies with flexibility, cost savings, and easy installation. 
Access Cable Trays works with companies of all sizes, from 
small businesses to Fortune 500 enterprises, to meet cable 
management needs efficiently and intelligently. 

Products Sold: 

The FloorFlex System of underfloor cable access trays, 
which includes floor trays, support bars, and all necessary 
clips and brackets. 



Physical Infrastructure 



S&AVTECH 



AVTECH Software, founded in 1 988, is focused on mak- 
ing the monitoring and management of systems, servers, 
networks, and data center environments easier. AVTECH 
provides powerful, easy-to-use software and hardware that 
saves organizations time and money while improving opera- 
tional efficiency and preparedness. AVTECH products use 
advanced alerting technologies to communicate critical status 
information and can perform automatic corrective actions. 

Products Sold: 

A full range of products that monitor the IT and facilities 
environment, including temperature, humidity, power, 
flood, room entry, and UPS 



Physical Infrastructure 



BayTech was founded in 1976 and, since the 1990s, has 
developed unique products for remote power management. 
The company uses printed circuit board instead of wires for 
a better, more resilient connection between the data center 
equipment and the receptacle. BayTech provides an exten- 
sive Web site with brochure downloads, warranty informa- 
tion, and reseller support and also offers evaluation units for 
data centers. 

Products Sold: 

• Power control, distribution, management, and metering 

• Power transfer switches 

• Console management and remote site management 



(866) 777-2576 I www.accesscabletrays.coin 



(888) 220-6700 1 www.AVTECH.coin 



(800)523-2702 I www.baytech.net 
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Physical Infrastructure 



CYBER@SWITCHING® 

Cyber Switching is an innovator and manufacturer of power 
management solutions used to distribute power throughout 
an entire data center, from the building infrastructure to the 
rack level. Cyber Switching products provide companies 
with quality power data throughout the data center, enabling 
them to make sound, informed decisions regarding their 
power grid. Located in San Jose, Calif., Cyber Switching 
began pioneering power distribution technologies in 1 994 
and continues to design and develop innovative and techni- 
cally advanced power solutions such as the ePower, PM8, 
Dualcom S, ElVIC, Galaxy Series, E Series, and PS Series. 



Products Sold: 

• Intelligent power management 

• Value-added power management 

• IVIetered power distribution 

• Three-phase power distribution 



Energy management 
and control 
Switches 



311-6277 I www.cyberswitching.com 



Physical Infrastructure 



™ Information Support Concepts.iNc , 

Leajin^ InibrmatioTi Technology Prmlucts Since 19B7 



For more than 25 years, Texas-based Information Support 
Concepts has been a leading provider of a variety of 
data center and telecom solutions, marketed directly and 
through VARs. ISC prides itself on identifying the needs 
of today's fast-paced and ever-changing computing envi- 
ronments and providing products that meet those needs. 
ISC's online catalog ensures you'll always have the most 
current product options and information available, but if 
you don't see what you need, contact ISC — there's a good 
chance it can provide the custom solution right for you. 

Products Sold: 

A variety of products, including server racks, rackmount key- 
board monitors, KVM switches, tech furniture, PDUs, patch 
panels, wallmount cabinets, and rackmount accessories 



(800)458-6255 | www.iscdfw.com 



Physical Infrastructure 



MOVINCOOL. 

the #1 SPOT COOLING SOLUTION 



The MovinCool division of DENSO Sales California has 
pioneered the use of portable air conditioning solutions for 
a variety of North and South American markets since 1982. 
MovinCool works with a national network of distributors and 
suppliers to provide product sales, installation, and rental. 

Products Sold: 

• Office Pro Portable Air Conditioner Series for indoor 
environments such as server and telecom rooms 

• Classic & Classic Plus Portable Air Conditioner Series for 
moisture removal, outdoor and industrial spot-cooling 

• CM Series ceiling-mounted A/C for cooling server 
rooms, telecom closets, or anywhere space is limited 



(800)264-9573 I www.movincool.com 



Physical Infrastructure 



SENSAPHONE' 

REMOTE MONITORING SOLUTIONS 



Sensaphone has been designing and manufacturing remote 
monitoring systems for more than 25 years and has more 
than 300,000 of its products in use. Sensaphone's product 
lineup offers a full range of devices with a broad number of 
features and applications designed to monitor your entire 
infrastructure and alert you to changes. All product engineer- 
ing functions, including hardware and software design and 
circuit board layout and assembly, are performed at the 
Sensaphone facility in Aston, Penn. 

Products Sold: 

Remote monitoring solutions that provide email and voice 
alarm notification for problems related to temperature, 
humidity, water detection, power failure, and more. 



(877)373-2700 I www.sensaphone.com 



Physical Infrastructure 



DAlA CERCE^ DEPOl 

A Gaw Associates, Inc. Company 

Data Center Depot prides itself on providing the best 
selection, pricing, and support for data center products. 
Our diversified product line can meet the specific needs of 
data center managers responsible for virtually any type of 
corporate setup. We are a major manufacturer and also 
distribute the product lines for top companies in the indus- 
try. Most of our products are available via our online store, 
but we encourage you to contact us so we can help you 
find the right products for your requirements and budget. 

Products Sold: 

• Data cabinets, racks, and accessories 

• LAN and NOC furniture • Cable ladders 

• Consoles and monitor walls • Patch panels 

• Power supplies • Storage furniture 



(877)429-7225 I www.DataCenterDepot.com 



Physical Infrastructure 




ITWatchDogs 



ITWatchDogs manufactures environmental monitors that 
help prevent downtime from climate- and power-related 
issues. Its Web-enabled monitors let users keep an eye on 
remote conditions from a secure Web interface and receive 
SNMP, email, SMS and voice call alerts when specified 
alarm thresholds are exceeded for external factors, including 
temperature, humidity, airflow, power failure, smoke, water 
detection, and more. 



Products Sold: 

• Climate monitors 

• Power monitors 



' Digital and analog sensors 
' IP surveillance cameras 



(512)257-1462 I sales@itwatchdogs.com I www.itwatchdogs.com 



Physical Infrastructure 



IT 



RACKMOUNT 

SOLUTIONS, Ltd 

' where customer service matters^ 



Rackmount Solutions' mission is to listen to the IT engi- 
neer's specific needs and deliver superb-quality, high- 
performance products through continuous product innova- 
tion and operational excellence. We pride ourselves in 
providing quality customer service, products that fit your IT 
requirements, and solid value for your money. 

Products Sold: 

• Wallmount and server racks and cabinets, including 
sound proof, air conditioned, and large cable bundle 

• Desktop/tabletop portable racks 

• Shockmount shipping cases 

• Bulk cable 



(866) 207-6631 I www.rackmauntsolutions.net 



Physical Infrastructure 




Server Technologry 

Solutions for the Data Center Equipment Cabinet 



Server Technology is committed to the PDU market with the 
largest group of engineers dedicated to power distribution 
and other solutions within the equipment cabinet. Advance- 
ments in device power monitoring help data centers monitor 
and improve their efficiency, and continuous research and 
development is fueled by companies that look to Sen/er 
Technology for their custom cabinet power solutions. 

Products Sold: 

A complete line of cabinet PDUs, including Per Outlet 
Power Sensing (POPS), Rack Mount Fail-Safe Transfer 
Switch, Console Port access with remote power manage- 
ment. Switched, Smart, Metered, Basic, and -48 VDC 



(800) 835-1515 I www.servertech.com 



Physical Infrastructure 




Based in New York City, Hergo Ergonomic Support 
Systems is an independent designer and manufacturer of 
enclosure cabinet solutions, technical computer furniture, 
and modular racking systems. The company's products are 
designed to promote organization in the workspace and 
to increase the productivity of computers, peripherals, and 
communications equipment. Hergo is known for its high- 
quality products and superior customer sen/ice. 



Products Sold: 

• Racks 

• Enclosures/cabinets 

• Motorized workstations 

• Flat-panel arms 



Computer desks 
Cable management 
Power management 



222-7270 I www.hergo.com 



Physical Infrastructure 



PDUs 



direct 



Established in 2008, PDUsDirect.com is an online whole- 
saler providing a select line of PDUs for server and net- 
worked environments. PDUs Direct's basic, metered, and 
switched Rack PDUs provide local and remote power 
management, power monitoring, and environmental 
monitoring. We pride ourselves in offering industrial-grade 
quality products at the lowest prices, with the fastest ship- 
ping (most orders shipped within 24 hours) and simplest 
purchase process. 

Products Sold: 

A complete line of metered and basic PDUs, and 20A 
switched PDUs. 



751-7387 I pdusdirect.com 



Physical Infrastructure 



SEALEZE 



Brush sealing sol utions for over 30 years. 

Sealeze has been providing high quality brush products 
and services for more than 25 years. Our goal is to exceed 
your expectations for service and quality. To make that 
possible, we manufacture all of our products in our factory 
in Richmond, Va., and operate under the ISO 9001-2000 
Quality Management System to ensure we're manufactur- 
ing the highest quality product every time. 

Products Sold: 

• A complete line of brush seal products, including 
in-floor, surface mount, through-wall, and circular 
cable seals. 



(800)787-7325 I www.sealeze.com 



Physical Infrastructure 



S I E M □ l\l 



Headquartered in Connecticut, Siemon has been around since 
1 903 as a provider of high-quality cabling solutions designed 
to improve network connections, performance, and efficiency. 
The company manufactures end-to-end copper and fiber 
cabling systems, cabinets, racks and cable management solu- 
tions for data centers, and more. Siemon also has an R&D 
arm, Siemon Labs, which focuses heavily on innovation and 
shows the company's long-term commitment to its customers. 



Products Sold: 

• Cable management solutions 

• Data center cabinets and racks 

• End-to-end copper and fiber 
cabling 



High-speed 
interconnects 
Intelligent infrastructure 
management 



(860) 945-4200 | www.siemon.com 
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Physical Infrastructure 



nSIMPLEX 

ISOLATION SYSTEMS 



Since 1979, Simplex Isolation Systems has been setting 
new design standards in modular expandable cleanroom 
components, isolation curtains, hardware, and new product 
development. Fontana, Calif., -based Simplex's unique strip 
doors and mounting systems are designed for quick instal- 
lation. Simplex parts and materials perform with optimum 
efficiency last longer, and save you money And with 
Simplex, you are always backed by industry expertise, 
product knowledge, and the best warranties in the market. 



Products Sold: 

• Cleanrooms 

• Enclosures 



Strip doors 
Curtains 



Physical Infrastructure 



(877) 746-7540 1 www.simplexisolationsystems.com 



Networking & VPN 



pl 



ixer 

International 



Plixer International develops NetFlow Analysis solutions that 
monitor and report on the utilization of network resources. 
Plixer was founded in 1999 and merged with Somix Tech- 
nologies in 2006. The company's solutions provide a holistic 
view regardless of equipment vendor. Plixer works with cus- 
tomers to ensure the tools quickly help pinpoint slowdowns in 
the network and the applications that depend on it. 

Products Sold: 

• Tools for analysis and reporting of resource utilization 

• Software for monitoring and trending bandwidth usage 

• Software for alarming based on unusual or potentially 
hazardous network traffic patterns 



(207)324-8805 I www.pllxer.cam 



Servers 



CHC^NBRO 



Chenbro is a leader in enclosure solutions, selling its prod- 
ucts primarily to system integrators and OEM and channel 
partners. The company's extensive research and develop- 
ment efforts help it to keep its competitive edge and main- 
tain market leadership, with special focus on thermal, EMI, 
and acoustic solutions. Taiwan-based Chenbro has offices 
in the United States, UK, The Netherlands, and China. 

Products Sold: 

• A comprehensive line of PC chassis, server/workstation 
chassis, rackmount chassis, and HDD enclosures. 



(909) 947-3200 I www.chenbra.com 



Clients 



4^ 



EEnagL 



After establishing itself in 2007 with the release of the 
GreenSQL Database Firewall engine for open-source data- 
bases, which has been downloaded more than 100,000 times 
in about 200 countries, Israel-based GreenSQL officially 
launched as a commercial company in 2009. Today, it pro- 
vides multiple software-based, all-in-one Unified Database 
Security solutions for SQL database servers. The company's 
recently released Enterprise Edition for small and medium- 
sized businesses and enterprises combines security, caching, 
auditing, and masking modules in one package. 

Products Sold: 

All-in-one Unified Database Security software-based solutions 
for databases available for a single database or as a high- 
availability solution for SIVIB and SME environments 



+ 972(3)688-8090 | www.greensql.cam 




PRODUCTS CO. 



Staco Energy was founded in 1937 and is one of the 
longest-lasting innovators of power products and services 
in the world. Qur recent innovations have created the 
foundation for entry into the SIVIB data center marketplace 
through pioneered design and expertise. We are commit- 
ted to providing you with the best tailored power solutions 
for your needs. 



Products Sold: 

A full line of UPS products, including our new FirstLine 
P 80 - 125kVA UPS, FirstLine PL 10- lOOkVA UPS, 
FirstLine BMS, and related accessories and services. 



(866) 261-1191 I www.stacaenergy.com 



Storage 



iStarUSA' Group 



Boasting more than 20 years of experience in the indus- 
trial computing market, iStarUSA Group has made its 
mark in the design and manufacture of rackmount chassis, 
industrial power supplies, data storage, enclosed cabi- 
nets and racks, and custom power solutions. The group 
reaches a number of vertical markets via its five divisions: 
Claypower, Claytek, IStarUSA, RaidAge, and Xeal. 



Products Sold: 

• Claypower: 
Custom power 

• Claytek: Racks 
and enclosures 



IStarUSA: 
Industrial chassis 
RaidAge: Data storage 
Xeal: Industrial power 



989-1189 I www.istarusa.cam 



Servers 



SUPERMICRt 



When buying a server, you don't want a one-size-fits-all 
solution. Supermicro uses modular and interoperable 
Server Building Blocks to offer the highest levels of flexibility 
and customization possible to design servers tailored and 
optimized for your specific needs. Supermicro's focus on 
green computing leadership, system design expertise, and 
power-saving technologies ensures the products you 
purchase are energy-efficient and application-optimized. 



Products Sold: 

• Servers 

• Motherboards 

• Chassis 



Networking 
Storage 



(408) 503-8000 I www.supermlcra.com 



Equipment Dealer 



Information 
Technology 
Trading 



At Information Technology Trading, our goal is to help you 
acquire the right hardware or software solution. We specialize 
in purchasing and reselling data-processing equipment and 
have more than 21 years combined experience. We provide 
services and system upgrades, DASD, communication, and 
memory. We're also an outlet for off-lease portfolios. 

Products Sold: 

• AS400, Advanced System/36, R/S6000, ES/9000, and 
PC systems (including lease and rental) 

• CPUs, memory, disks, tapes, displays, and controllers 

• Services, including system design and installation, 
maintenance, and buyback of existing hardware 



(877)715-3686 I www.ltechtradlng.com 



Networking & VPN 




Pinpoint Network Solutions' Transport sen/ices provide both 
SONET and IP-based services on-net or through national car- 
rier interconnection. Optical SONET/IP sen/ices from 0C-3/FE 
to QC-192/Gig-E (ring protected) are available in the domestic 
United States and abroad. Pinpoint also offers long haul, dark 
fiber services for high-bandwidth, mission-critical applications. 
Pinpoint's local and national interconnection agreements for 
private line and Internet peering enable a global reach, offering 
unparalleled data speed, security, and integrity. 



Services Offered: 

• Transport 

• Fixed wireless 

• Dedicated Internet access 



NOC services 
DWDM 
Dark fiber 



(866)500-6924 | www.pnptnetworks.cam 



Storage 



WeBuyUsedTape.net 



WeBuyUsedTape has been in the business of purchasing 
new, used, excess, and surplus magnetic media for more 
than 35 years. Our regulation-approved, secure data 
eradication processes and environmentally friendly 
disposal programs give organizations a safe and economic 
incentive for recycling used media. Customer service is 
one of our top priorities, backed by helpful, knowledge- 
able, and efficient team members. Obtain a no-obligation, 
confidential quote on your tape media today. 

Services Offered: 

Tape media buyback, secure data eradication, media 
disposal, and recycling 



(800) 821-1782 I www.WeBuyUsedTape.net 



Clients 



♦dtSearch 
www.dtsearch.com 



Maryland-based dtSearch started research and develop- 
ment in text retrieval in 1988. The company is known for 
speedy adoption of new programming standards, OSes, 
and file types. Plus, it has a flexible licensing model. 
Typical corporate use of dtSearch includes general infor- 
mation retrieval, Internet and intranet site searching, and 
email archiving and email filtering. 

Products Sold: 

Text retrieval products, including: 

• Desktop With Spider • Web With Spider 

• Network With Spider • Engine For Win & .NET 

• Publish For CD/DVDs • Engine For Linux 



(800)483-4637 I www.dtsearch.cam 



Equipment Dealer 




In 1987, Pegasus Computer Marketing started providing 
mainframe products to the end-user market. What began 
as a sales-only organization soon adapted to offer in-house 
repair and refurbishment. During the past 1 years, Pegasus 
has focused primarily on the point-of-sale and barcode 
industries, buying, selling, and providing service contracts for 
anywhere from a few scanners to hundreds. 

Products Sold: 

We buy, sell, and service: 

• Point-Of-Sale Equipment and POS/PC Flat Panels 

• Wired and Wireless Barcode Hardware 

• Kronos Time Clocks and Accessories 



(800) 856-2111 I www.pegasuscomputer.net 
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^hergo' www.hergo.com 



888.222.7270 



